Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,283
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go · npm
commitdev/zero-backend-go
A zero module containing a backend that can be deployed to the infrastructure set up using zero-aws-eks-stack
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
cosmos/btcutil
Provides bitcoin-specific convenience functions and types
ISCSep 23, 2026 · metrics 2.10.0
Go
costela/golpa
Go library for modeling and solving linear programming problems
GPL-3.0Oct 6, 2026 · metrics 2.10.0
—
cwru-rcci/dug
dug is a utility similar to du that focuses on summarizing usage by group or owner
MITOct 23, 2026 · metrics 2.10.0
—
d2iq-archive/kubeaddons-enterprise
Enterprise Addon Repository
No licenseSep 20, 2026 · metrics 2.10.0
npm
dabapps/roe
DabApps' Project Development Kit
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
databricks/m3
M3 monorepo - Distributed TSDB, Aggregator and Query Engine, Prometheus Sidecar, Graphite Compatible, Metrics Platform
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
deskpro/react-datepicker-hijri
A simple and reusable datepicker component for React
MITSep 18, 2026 · metrics 2.10.0
Go
dfinity/terraform-provider-ic
A Terraform provider for provisioning Internet Computer canisters
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
dymensionxyz/osmosis
The AMM Laboratory
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
ecnepsnai/ds
A key-value store with hash indexes
MITSep 13, 2026 · metrics 2.10.0
—
ejoy/kcp-go
A Production-Grade Reliable-UDP Library for golang
MITOct 19, 2026 · metrics 2.10.0
PyPI
elemental-lf/k8s-crd-resolver
Resolves JSON references ($ref) in Kubernetes custom resource definitions
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
emqx/cuttlefish
never lose your childlike sense of wonder baby cuttlefish, promise me?
No licenseSep 11, 2026 · metrics 2.10.0
RubyGems
envygeeks/forwardable-extended
:muscle: Extends forwardable with delegation to hashes and instance variables.
MITSep 10, 2026 · metrics 2.10.0
—
evalplus/humanevalplus_release
Release repository for HumanEval+ data
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
fmotalleb/junction
A simple configurable reverse proxy that uses socks and/or ssh as transport layer, with builtin support for SNI and Http-Header based autorouting.
GPL-2.0Sep 15, 2026 · metrics 2.10.0
Go
go-toolsmith/astcast
Package astcast wraps type assertion operations in such way that you don't have to worry about nil pointer results anymore.
MITSep 16, 2026 · metrics 2.10.0
npm
grantila/list-open-files
lsof for Node.js
MITOct 23, 2026 · metrics 2.10.0
Go
green-api/whatsapp-api-client-golang-v2
This library helps you easily create a Golang application with Whatsapp support
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
gunk/gunkls
Gunk language server
MITSep 19, 2026 · metrics 2.10.0
Go · npm
hanzoai/ai
Hanzo AI — LLM control plane, RAG, and model hub. Native Go routing for 66+ models over an OpenAI-compatible /v1 API; mounts as the 'ai' subsystem inside hanzoai/cloud.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
hazcod/gosecurity
Security library for Go, contains multihash-like library or encryption.
MITSep 19, 2026 · metrics 2.10.0
npm
hs85jeong/korean-lotto
No repository description published.
No licenseOct 21, 2026 · metrics 2.10.0
crates.io
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Custom licenseSep 16, 2026 · metrics 2.10.0
Maven
icon-project/javaee-unittest
Unit Testing Framework for Java SCORE
Apache-2.0Oct 25, 2026 · metrics 2.10.0
NuGet
itmo-is-dev/SourceKit
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
NuGet
itmo-is-dev/platform
Platform libraries used in itmo-is-dev projects
Custom licenseSep 12, 2026 · metrics 2.10.0
Go
jcmturner/goidentity
No repository description published.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
jelmer/debversion-rs
Rust parser/validator for Debian version strings
No licenseOct 18, 2026 · metrics 2.10.0