Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,404
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
septagon-oss/pk-shared
Shared vocabulary and small primitives for PlatformKit OSS.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
sergei-dyshel/assh
:computer: make your ssh client smarter
MITJul 25, 2026 · metrics 2.10.0
crates.io
sfackler/bytes
Utilities for working with bytes
Apache-2.0Jul 26, 2026 · metrics 2.10.0
—
sfuchs79/subsurface
Subsurface divelog program
GPL-2.0Jul 27, 2026 · metrics 2.10.0
—
sfztools/simde
Implementations of SIMD instruction sets for systems which don't natively support them.
MITJul 23, 2026 · metrics 2.10.0
Go
shadowofcards/go-toolkit
No repository description published.
No licenseAug 11, 2026 · metrics 2.10.0
Go
shenli/tidb
TiDB is an open source distributed HTAP database compatible with the MySQL protocol
Apache-2.0Jul 22, 2026 · metrics 2.10.0
PyPI
shinchris/server-client-python
A Python library for the Tableau Server REST API
MITJul 27, 2026 · metrics 2.10.0
Go
shizhMSFT/distribution
The toolkit to pack, ship, store, and deliver container content
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go
shouni/git-gemini-cli
AIレビューCLI
MITAug 28, 2026 · metrics 2.10.0
Go
shouni/go-manga-kit
漫画生成ツールキット
MITSep 5, 2026 · metrics 2.10.0
Go
significance/swarm
Swarm: Censorship resistant storage and communication infrastructure for a truly sovereign digital society
LGPL-3.0Aug 10, 2026 · metrics 2.10.0
Go
simonpasquier/cluster-monitoring-operator
Manage the OpenShift monitoring stack
Apache-2.0Jul 24, 2026 · metrics 2.10.0
Go
sivaosorg/replify
replify · A Go library to simplify and standardize API response wrapping for RESTful services.
GPL-3.0Aug 10, 2026 · metrics 2.10.0
crates.io
skade/just
🤖 Just a command runner
No licenseAug 23, 2026 · metrics 2.10.0
—
skosukhin/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
LGPL-2.1Jul 26, 2026 · metrics 2.10.0
—
skylenet/swarm
Swarm: Censorship resistant storage and communication infrastructure for a truly sovereign digital society
LGPL-3.0Aug 10, 2026 · metrics 2.10.0
—
skysec/cni
Container Network Interface - networking for Linux containers
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Go
slashpai/cluster-monitoring-operator
Manage the OpenShift monitoring stack
Apache-2.0Jul 24, 2026 · metrics 2.10.0
Go
slaveofcode/go-whatsapp
WhatsApp Web API
MITJul 25, 2026 · metrics 2.10.0
npm
slowpoison/slowpoison-ws
Simple to use, blazing fast and thoroughly tested WebSocket client and server for Node.js
MITJul 28, 2026 · metrics 2.10.0
—
sneako/fuse
A Circuit Breaker for Erlang
MITAug 22, 2026 · metrics 2.10.0
Maven
snuyanzin/datafaker
Brings the popular ruby faker gem to Java and Kotlin
Apache-2.0Jul 23, 2026 · metrics 2.10.0
—
solopasha/Hyprland
Hyprland is a highly customizable dynamic tiling Wayland compositor that doesn't sacrifice on its looks.
BSD-3-ClauseJul 26, 2026 · metrics 2.10.0
Go
soltysh/descheduler
Descheduler for Kubernetes
Apache-2.0Jul 26, 2026 · metrics 2.10.0
PyPI
somdoron/czmq
High-level C binding for ØMQ
MPL-2.0Sep 5, 2026 · metrics 2.10.0
—
somdoron/libzmq
ØMQ libzmq core library -- development trunk
MPL-2.0Sep 5, 2026 · metrics 2.10.0
—
soubiliz/ups
Command line tools for manipulating UPS patch files, written in Go.
MITSep 3, 2026 · metrics 2.10.0
Go
souleb/notification-controller
The GitOps Toolkit event forwarded and notification dispatcher
Apache-2.0Jul 31, 2026 · metrics 2.10.0
Go
sourcegraph-ce/logrus
Structured, pluggable logging for Go.
MITJul 29, 2026 · metrics 2.10.0