Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,629
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
586B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
chenxiao0228/bazel-gazelle
Gazelle is a Bazel build file generator for Bazel projects. It natively supports Go and protobuf, and it may be extended to support new languages and custom rule sets.
Apache-2.0Aug 21, 2026 · metrics 2.10.0
—
chenz85/oauth1
Go OAuth1 http://godoc.org/github.com/dghubble/oauth1
MITSep 9, 2026 · metrics 2.10.0
PyPI
christianversloot/satpy
Python package for earth-observing satellite data processing
GPL-3.0Jul 26, 2026 · metrics 2.10.0
Go · npm
chrkl/cli
Simple set of commands to manage a Kyma installation
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
chronolaw/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
No licenseJul 26, 2026 · metrics 2.10.0
npm
ckohen/discord-api-types
Up to date Discord API Typings, versioned by the API version
MITJul 27, 2026 · metrics 2.10.0
Go
clarian-finance/sdk-go
MOVED: Go SDK now lives at github.com/clarian-finance/sdk (go/ subdirectory) — go get github.com/clarian-finance/sdk/go
No licenseJul 25, 2026 · metrics 2.10.0
Go · npm
clebs/kyma-cli
Kyma-CLI provides simple set of commands to interact with a Kyma installation
Apache-2.0Sep 10, 2026 · metrics 2.10.0
RubyGems
cloudfoundry-attic/consul
Consul is a tool for service discovery, monitoring and configuration.
MPL-2.0Aug 12, 2026 · metrics 2.10.0
Go
cloudfoundry/existingvolumebroker
No repository description published.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
—
cmills1095/aspect
A parallel, extensible finite element code to simulate convection in both 2D and 3D models.
Custom licenseJul 27, 2026 · metrics 2.10.0
Go
codefromthecrypt/oras
OCI Registry As Storage
MITJul 25, 2026 · metrics 2.10.0
PyPI
coherent-oss/pytest-black
pytest plugin to enable formatting checks with black
MITSep 9, 2026 · metrics 2.10.0
Hex
cozy-elixir/alipay_kit
No repository description published.
No licenseSep 9, 2026 · metrics 2.10.0
npm
cpoile/mattermost-plugin-jira
JIRA plugin for Mattermost 🔌
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
craftsman-li/beego
beego is an open-source, high-performance web framework for the Go programming language.
Custom licenseAug 22, 2026 · metrics 2.10.0
Go
craven-katrine-piers-phrase/gomatic.yze-go-layout
yze analyzer: cross-package three-tier command/domain correspondence
MITAug 27, 2026 · metrics 2.10.0
Go
crenshaw-dev/notifications-engine
Affordable notifications for Kubernetes
Apache-2.0Jul 29, 2026 · metrics 2.10.0
NuGet
crisbraatz/MetaphonePtBr
Brazilian Portuguese phonetic matching for .NET. Convert single words into stable tokens for name, address, brand, and fuzzy search.
MITSep 5, 2026 · metrics 2.10.0
crates.io
critiqjo/pulldown-cmark
No repository description published.
MITSep 10, 2026 · metrics 2.10.0
Go
crobert-1/opentelemetry-collector-contrib
Contrib repository for the OpenTelemetry Collector
Apache-2.0Jul 27, 2026 · metrics 2.10.0
—
cryptomental/go-ethereum
Official Go implementation of the Ethereum protocol
LGPL-3.0Jul 26, 2026 · metrics 2.10.0
Go
cryptomeow/lnd
Lightning Network Daemon ⚡️
MITAug 24, 2026 · metrics 2.10.0
npm
cryptpad-team/cryptpad
Collaborative office suite, end-to-end encrypted and open-source.
AGPL-3.0Jul 28, 2026 · metrics 2.10.0
PyPI
cxz/splitgraph
Splitgraph command line client and python library
Custom licenseAug 24, 2026 · metrics 2.10.0
Go
cyrille-leclerc/opentelemetry-operator
Kubernetes Operator for OpenTelemetry Collector
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
d8vjork/vscode-icons
Icons for Visual Studio Code
MITJul 26, 2026 · metrics 2.10.0
Maven
daisy/epubcheck
Validation tool for EPUB
MITJul 28, 2026 · metrics 2.10.0
crates.io
dancingbug/rsfbclient
Rust Firebird Client
MITAug 16, 2026 · metrics 2.10.0
Go
danielmellado/cluster-monitoring-operator
Manage the OpenShift monitoring stack
Apache-2.0Jul 24, 2026 · metrics 2.10.0