Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,488
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go · npm
gxed/gogo-protobuf
Protocol Buffers for Go with Gadgets
Custom licenseJul 26, 2026 · metrics 2.10.0
npm
gxed/opentracing-go
OpenTracing API for Go
MITJul 26, 2026 · metrics 2.10.0
Go
hakksawwcp/preflight
No repository description published.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Go · npm
hanzoai/iam-v1
RETIRED — superseded by the clean hanzoai/iam (zip-native + hanzoai/orm). Casdoor/Beego fork, no longer in any graph. See hanzoai/iam.
Custom licenseAug 2, 2026 · metrics 2.10.0
—
haoqing0110/gocsi
A Container Storage Interface (CSI) library, client, and other helpful utilities created with Go.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Go
happysnaker/procfs
Fork used for upstream Prometheus procfs contributions.
Apache-2.0Jul 27, 2026 · metrics 2.10.0
Go
harshanarayana/bashful
Use a yaml file to stitch together commands and bash snippits and run them with a bit of style. Why? Because your bash script should be quiet and shy-like (...and not such a loud mouth).
MITSep 1, 2026 · metrics 2.10.0
—
hartzell/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Custom licenseJul 26, 2026 · metrics 2.10.0
crates.io
hawkw/bytes
Utilities for working with bytes
Apache-2.0Jul 26, 2026 · metrics 2.10.0
PyPI
hazbottles/satpy
Python package for earth-observing satellite data processing
GPL-3.0Jul 26, 2026 · metrics 2.10.0
Go
heaths/cli
GitHub’s official command line tool
MITJul 31, 2026 · metrics 2.10.0
PyPI
helgaweb/satpy
Python package for earth-observing satellite data processing
GPL-3.0Jul 26, 2026 · metrics 2.10.0
npm · PyPI
hgjazhgj/AzurLaneAutoScript
AlasFpyBridge
GPL-3.0Jul 26, 2026 · metrics 2.10.0
—
hidalgo-vntu/v
Simple, fast, safe, compiled language for developing maintainable software. Compiles itself in <1s with zero library dependencies. Supports automatic C => V translation. https://vlang.io
MITAug 23, 2026 · metrics 2.10.0
—
hiko1129/qiicon
qiita contribution client
No licenseJul 18, 2026 · metrics 2.10.0
PyPI
howff/satpy
Python package for earth-observing satellite data processing
GPL-3.0Jul 26, 2026 · metrics 2.10.0
Go · npm
hperl/oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
hyp1231/RecBole
A unified, comprehensive and efficient recommendation library
MITJul 25, 2026 · metrics 2.10.0
Packagist
hyperf/service-governance-nacos
[READ ONLY] A nacos adapter for Hyperf service governance component.
MITAug 10, 2026 · metrics 2.10.0
Go
iGoogle-ink/gotil
No repository description published.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
iamruinous/meshtastic-message-relay
Flexible message relay for meshtastic nodes to services like apprise
MITAug 23, 2026 · metrics 2.10.0
Go
ianling/imgui-go
Go wrapper library for "Dear ImGui" (https://github.com/ocornut/imgui)
Custom licenseAug 27, 2026 · metrics 2.10.0
—
ic2hrmk/minish
Draft of independent task scheduler
No licenseAug 22, 2026 · metrics 2.10.0
PyPI
ihmeuw/risk_distributions
No repository description published.
BSD-3-ClauseJul 16, 2026 · metrics 2.10.0
—
ismaelsadeeq/bitcoin
Bitcoin Core integration/staging tree
MITJul 26, 2026 · metrics 2.10.0
Go
jackzhangsir/gorose
GoRose(go orm), a mini database ORM for golang, which inspired by the famous php framwork laravle's eloquent. It will be friendly for php developer and python or ruby developer. Currently provides six major database drivers: mysql,sqlite3,postgres,oracle,mssql, Clickhouse.
MITAug 16, 2026 · metrics 2.10.0
—
jacoblai/client
go package for communicating with a MQTT broker
Apache-2.0Aug 3, 2026 · metrics 2.10.0
—
jacoblai/tools
go package for building MQTT components
Apache-2.0Aug 3, 2026 · metrics 2.10.0
npm
jacobwilliams/vscode-icons
Icons for Visual Studio Code
MITJul 26, 2026 · metrics 2.10.0
PyPI
jactry/satpy
Python package for earth-observing satellite data processing
GPL-3.0Jul 26, 2026 · metrics 2.10.0