Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,328
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
NDari/gocrunch
High performance numeric library in Go
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
NextPKI/certscan
Auto-discovery agent for TLS certificates. Scans your local IPv4/IPv6 network and static hosts for HTTPS, SMTPS, IMAPS, and more. Reports certificate metadata via Webhook. Supports TLS, STARTTLS, SNI, and protocol tagging. You can't protect what you don't know you have.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
PostHog/posthog-rrweb
a complete copy of rrweb allowing us to vary CI
MITSep 15, 2026 · metrics 2.10.0
npm · crates.io
ProjectLibertyLabs/graph-sdk
SDK to interact with public and private graphs
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
RTradeLtd/testenv
🚧 configuration for spinning up Temporal test environments
No licenseSep 16, 2026 · metrics 2.10.0
npm · Go
SilverFlin/DrDuck
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
PyPI
Uniterra-Solutions/caelterra
Caelterra — Team standardisation plugin for Hermes Agent
MITSep 24, 2026 · metrics 2.10.0
NuGet
Vantiv/cnp-sdk-for-dotnet
.NET SDK to ease XML integrations with the Vantiv eCommerce platform
Custom licenseSep 21, 2026 · metrics 2.10.0
NuGet
VirtoCommerce/vc-module-bulk-actions
No repository description published.
No licenseOct 3, 2026 · metrics 2.10.0
Go
WangNingkai/micli
💥Take XiaoMi Cloud Service to the command line
MITOct 19, 2026 · metrics 2.10.0
—
aMiscreant/TermuxTube
Automate YouTube video and Shorts uploads directly from your Android phone using Termux. Includes AI-generated titles, description handling, tag assignment, and OAuth-authenticated uploading via the YouTube Data API. Optimized for mobile creators, content farms, and automation fans.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Packagist · npm
acquia/cohesion-theme
Acquia Cohesion minimal theme. A Cohesion enabled kickstarter theme for use within Cohesion projects.
No licenseOct 20, 2026 · metrics 2.10.0
PyPI
alexlarsson/docker
Docker - the open-source application container engine
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
alibaba-archive/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Apache-2.0Sep 12, 2026 · metrics 2.10.0
crates.io
anoma/smooth-operator
Rust checked arithmetic without the visual clutter
MITOct 12, 2026 · metrics 2.10.0
Go
apapsch/go-jsonmerge
Merge JSON objects
MITSep 14, 2026 · metrics 2.10.0
—
arilamstein/choroplethrCaCensusTract
Shapefile, metadata and visualization functions for US Census Tracts in California
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
astroport-fi/terra-plus
Production Quality contracts under open source licenses
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
RubyGems
avolochnev/lopata
Functional acceptance testing.
No licenseOct 3, 2026 · metrics 2.10.0
RubyGems
aycabta/vterm-gem
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
Hex
ayrat555/ex_pbkdf2
Password-Based Key Derivation Function v2 (PBKDF2) for Elixir by a Rust-based NIF
MITOct 25, 2026 · metrics 2.10.0
npm · crates.io
baekenough/oh-my-customcodex
Codex-native port of oh-my-customcode
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
bahlo/generic-list-go
Go container/list but with generics.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Packagist
barryvdh/laravel
A PHP Framework For Web Artisans
No licenseSep 19, 2026 · metrics 2.10.0
Hex · crates.io
benodiwal/bubblegum_nifs
Elixir interface for Metaplex Bubblegum compressed NFTs on Solana. This library provides functions to create, mint, and transfer compressed NFTs using the Metaplex Bubblegum program.
MITSep 14, 2026 · metrics 2.10.0
—
betrace-hq/compliance-as-code
A collection of patterns for treating compliance evidence as observable telemetry.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
bigeasy/delta
URL routing for the browser and Node.js.
MITSep 20, 2026 · metrics 2.10.0
Go
bitrockteam/caravan-cli
Caravan's CLI
MPL-2.0Oct 18, 2026 · metrics 2.10.0
npm
blackravenx/captcha-libs
CaptchaLibs - Simplified Monorepo for Node.js Captcha Recognition APIs
No licenseOct 12, 2026 · metrics 2.10.0
—
bower-media-samples/big-buck-bunny-1080p-30s
30 first seconds of Big Buck Bunny (1080p)
No licenseSep 20, 2026 · metrics 2.10.0