Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,333
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
ypid/advanced-ssh-config
:computer: assh: ssh wrapper using ProxyCommand that adds regex, aliases, gateways, dynamic hostnames to SSH and ssh-config
MITSep 13, 2026 · metrics 2.10.0
Go
yshrsmz/ticketflow
Thicket management for AI and developer
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
yuchen112358/coriander
Build NVIDIA® CUDA™ code for OpenCL™ 1.2 devices
Apache-2.0Aug 25, 2026 · metrics 2.10.0
Go
yunginnanet/cuntdb
CuntDB is an embeddable, in-memory key/value database for Go with custom indexing and geospatial support
MITSep 10, 2026 · metrics 2.10.0
Go
yunginnanet/gomuks
A terminal based Matrix client written in Go.
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
yungjakey/credential-masker
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
crates.io
yuping322/tikv
Distributed transactional key-value database, originally created to complement TiDB
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
z3ntu/openrazer
An entirely open source driver and user-space daemon that allows you to manage your Razer peripherals on GNU/Linux
GPL-2.0Sep 13, 2026 · metrics 2.10.0
Go
z4ce/snyk-auto-org
A drop in wrapper for the snyk cli that attempts to divine the organization you want for consistent ignores
No licenseSep 18, 2026 · metrics 2.10.0
—
z825956278/goproxy
基于go写的隧道代理服务器，主要用于翻墙。
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
zadjadr/terraform-provider-exoscale
Terraform Exoscale provider
MPL-2.0Oct 18, 2026 · metrics 2.10.0
npm
zakodium-oss/react-ocl-nmr
No repository description published.
MITOct 22, 2026 · metrics 2.10.0
crates.io
zakura-core/zakura-vct-sprout-history
No repository description published.
Custom licenseSep 13, 2026 · metrics 2.10.0
—
zanzaben/osal
The Core Flight System (cFS) Operating System Abstraction Layer (OSAL)
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
zap-proto/go
ZAP for Go — github.com/zap-proto/go
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
zap-proto/http
HTTP request/response over ZAP — drop-in net/http API
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
zap-proto/js
ZAP for TypeScript & JavaScript — @zap-proto/zap
Custom licenseSep 24, 2026 · metrics 2.10.0
npm · Go
zap-proto/mcp
Model Context Protocol over ZAP — mutually authenticated, non-repudiable
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
zap-proto/zip
ZAP-native web framework (gofiber v3) — one framework for every Go binary; ZAP primary, HTTP extra, MCP for free
MITSep 10, 2026 · metrics 2.10.0
Go
zchee/vercel-terraform-provider-vercel
Terraform Vercel Provider
MPL-2.0Sep 10, 2026 · metrics 2.10.0
Go
zeltox/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Go
zenreach/smallstep-certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go · PyPI
zer0se7en/fabric
Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. Its modular and versatile design satisfies a broad range of industry use cases. It offers a unique approach to consensus that enables performance at scale while preserving privacy.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
—
zerok/vault-spec
A helper for enforcing a certain Vault structure
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
zeromberto/go-auth0
Go client library for the Auth0 platform.
MITSep 19, 2026 · metrics 2.10.0
Go
zeroshade/parquet-go
pure golang library for reading/writing parquet file
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
zhagnlu/milvus
Vector database for scalable similarity search and AI applications.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
zhill/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
zhubert/erg
Workflow-driven autonomous coding daemon for Claude Code
MITSep 12, 2026 · metrics 2.10.0
Go
zjkmxy/generic
A collection of generic data structures written in Go.
MITSep 19, 2026 · metrics 2.10.0