Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,168
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
Gitsack/passport-image-generator
Utility to generate passport image layouts.
MITSep 19, 2026 · metrics 2.10.0
—
HeliumProject/rapidjson
Mirror of http://code.google.com/p/rapidjson
MITSep 20, 2026 · metrics 2.10.0
Go
Koeng101/rhea
Golang Rhea parser
MITSep 19, 2026 · metrics 2.10.0
—
LTLA/aarand
Aaron's random distributions for C++
MITSep 16, 2026 · metrics 2.10.0
crates.io
Moonsong-Labs/compilers
Utilities for working with native solc and compiling projects.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
Nanyan/heco-chain
HECO-Chain client based on the go-ethereum fork
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
—
OKNoah/wormhole
Secure tunnel
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
Ph0m1/Porta
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
—
Prendo93/m3u8-1
Parser and generator of M3U8-playlists for Apple HLS. Library for Go language. :cinema:
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
Qintsg/dsh-safe-delete
Safe delete plugin for DeepSeek Harness (DSH): move files to trash / staging area instead of permanent removal, with restore and purge support.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
Robot-Inventor/eslint-config
My ESLint config preset
MITSep 16, 2026 · metrics 2.10.0
Go
SWAN-community/swift-go
Shared Web InFormaTion (SWIFT) - an open source cryptographically secure web solution for sharing information across domains implemented in Go
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
TheThingsIndustries/protoc-gen-doc
Documentation generator plugin for Google Protocol Buffers
MITSep 20, 2026 · metrics 2.10.0
—
Custom licenseSep 20, 2026 · metrics 2.10.0
Go
Unity-Technologies/master
Converts protocol buffers to Avro.
MITSep 19, 2026 · metrics 2.10.0
Go
YujiSuzuki/ai-sandbox-dkmcp
Secure AI sandbox for Claude Code / Gemini — hide secrets, enable cross-container access
MITSep 18, 2026 · metrics 2.10.0
Go
abroudoux/dk
🦧 ❤️ 🐳 A minimalist TUI to interract faster with Docker
MITSep 18, 2026 · metrics 2.10.0
Packagist · npm
achttienvijftien/wp-extras
No repository description published.
GPL-3.0Sep 22, 2026 · metrics 2.10.0
—
andreaskoch/dee-cli
Cross-platform command-line utility for DNS updates via DNSimple
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
apto/keydb
Key/value data/query API to use on the server or in the browser.
MITSep 20, 2026 · metrics 2.10.0
Go
array2d/kvspace-go
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
Go · npm
backmarket-oss/k8s-image-swapper
:wheel_of_dharma: Mirror images into your own registry and swap image references automatically.
MITSep 20, 2026 · metrics 2.10.0
Go
blackwell-systems/gcp-iam-control-plane
Control plane for local GCP emulators. Single policy file drives IAM enforcement across Secret Manager, KMS, and more. Test production authorization behavior without GCP credentials.
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
bmish/eslint-plugin-eslint-plugin
An ESLint plugin for linting ESLint plugins
MITSep 19, 2026 · metrics 2.10.0
PyPI
brettcannon/importlib
Packaging for importlib from Python 2.7 for the Cheeseshop/PyPI
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
cdvelop/skillsearch
A minimalist Go library for SQL-based MCP skill discovery and LLM context optimization.
MITSep 19, 2026 · metrics 2.10.0
Go
cgroschupp/terraform-provider-confluent-cloud
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Go
cpplain/lnk
Opinionated symlink manager for dotfiles
MITSep 19, 2026 · metrics 2.10.0
RubyGems
cucumber/messages-ruby
[READ ONLY] Cucumber Messages for Ruby (Protocol Buffers) - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/messages
MITSep 19, 2026 · metrics 2.10.0
Go
despinoza9/dns-tools
DNS tools for zone signature (file, pkcs11-hsm) and validation, and zone digest (ZONEMD)
MITSep 17, 2026 · metrics 2.10.0