Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,225
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
AndroidPoet/revenuecat-cli
Fast, lightweight, and scriptable CLI for RevenueCat
MITSep 17, 2026 · metrics 2.10.0
Hex
BrandtHill/Salchicha
An Elixir NaCl/libsodium-lite Salsa20/ChaCha20 encryption tool
MITSep 18, 2026 · metrics 2.10.0
—
EngoEngine/math
Fork of luxengine/math which is now moved
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
—
NDari/gocrunch
High performance numeric library in Go
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
NextPKI/certscan
Auto-discovery agent for TLS certificates. Scans your local IPv4/IPv6 network and static hosts for HTTPS, SMTPS, IMAPS, and more. Reports certificate metadata via Webhook. Supports TLS, STARTTLS, SNI, and protocol tagging. You can't protect what you don't know you have.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
NuGet
Vantiv/cnp-sdk-for-dotnet
.NET SDK to ease XML integrations with the Vantiv eCommerce platform
Custom licenseSep 21, 2026 · metrics 2.10.0
—
arilamstein/choroplethrCaCensusTract
Shapefile, metadata and visualization functions for US Census Tracts in California
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
astroport-fi/terra-plus
Production Quality contracts under open source licenses
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
Packagist
barryvdh/laravel
A PHP Framework For Web Artisans
No licenseSep 19, 2026 · metrics 2.10.0
npm
bigeasy/delta
URL routing for the browser and Node.js.
MITSep 20, 2026 · metrics 2.10.0
—
bower-media-samples/big-buck-bunny-1080p-30s
30 first seconds of Big Buck Bunny (1080p)
No licenseSep 20, 2026 · metrics 2.10.0
PyPI
bugout-dev/brood
Instantly add authentication, teams, and payments to your frontend, API, or serverless application.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
d2iq-archive/kubeaddons-enterprise
Enterprise Addon Repository
No licenseSep 20, 2026 · metrics 2.10.0
npm
deskpro/react-datepicker-hijri
A simple and reusable datepicker component for React
MITSep 18, 2026 · metrics 2.10.0
PyPI
elemental-lf/k8s-crd-resolver
Resolves JSON references ($ref) in Kubernetes custom resource definitions
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
go-toolsmith/astcast
Package astcast wraps type assertion operations in such way that you don't have to worry about nil pointer results anymore.
MITSep 16, 2026 · metrics 2.10.0
Go
green-api/whatsapp-api-client-golang-v2
This library helps you easily create a Golang application with Whatsapp support
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
gunk/gunkls
Gunk language server
MITSep 19, 2026 · metrics 2.10.0
Go
hazcod/gosecurity
Security library for Go, contains multihash-like library or encryption.
MITSep 19, 2026 · metrics 2.10.0
npm
jridgewell/set-array
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
Go
manuwarfare/abbtr
abbtr is a cli app (alternative to alias function) to abbreviate long commands in the terminal
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
melihbirim/sieswi
Ultra-fast SQL-on-CSV engine in Go. Streams results instantly, auto-parallelizes big files, no database required.
MITSep 20, 2026 · metrics 2.10.0
—
nitrictech/contracts
Contracts for the Nitric APIs, served by Nitric Membrane and consumed by various language SDKs
No licenseSep 20, 2026 · metrics 2.10.0
Go
octasoft-ltd/gmail-exporter
A Go CLI tool for exporting and importing Gmail between accounts using OAuth
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
onfleet/discontinued-php-onfleet
Onfleet API wrapper in PHP
MITSep 18, 2026 · metrics 2.10.0
—
open5gs/prometheus-client-c
A Prometheus Client in C
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
openshift/ceph-csi
CSI driver for ceph
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
ruiii/plugin-Hairstrength
senka-calc for poi
MITSep 18, 2026 · metrics 2.10.0
npm
schmooky/pylinka
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
npm
sinonjs/commons
Simple functions shared among the sinon end user libraries
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0