Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,924
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
652B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
DavidDeSimone/deno
A secure JavaScript and TypeScript runtime
MITSep 11, 2026 · metrics 2.10.0
PyPI
ElsevierSoftwareX/SOFTX-D-20-00001
Microstructure modeling, mesh generation, analysis, and visualization. To cite this software publication: https://www.sciencedirect.com/science/article/pii/S2352711020303083
MITOct 21, 2026 · metrics 2.10.0
Maven
Hccake/ballcat
😸一个快速开发脚手架，快速搭建企业级后台管理系统，并提供多种便捷starter进行功能扩展。主要功能包括前后台用户分离，菜单权限，数据权限，定时任务，访问日志，操作日志，异常日志，统一异常处理，XSS过滤，SQL防注入，国际化 等多种功能
MITOct 20, 2026 · metrics 2.10.0
Go
JanDeDobbeleer/gopsutil
psutil for golang
Custom licenseSep 20, 2026 · metrics 2.10.0
Hex
JohnBjrk/adglent
Advent of code helper - automating setup of tests, solution template and problem input
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go
Klarrio/kafka-proxy
Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
LF-Engineering/aws-lambda-go-api-proxy
lambda-go-api-proxy makes it easy to port APIs written with Go frameworks such as Gin (https://gin-gonic.github.io/gin/ ) to AWS Lambda and Amazon API Gateway.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
LinuxSuRen/api-testing-vault-extension
A Vault-based secret extension of api-testing.
No licenseSep 11, 2026 · metrics 2.10.0
crates.io
Lolirofle/endian-type
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Packagist
Lullabot/MinkSelenium2Driver
Selenium2 (webdriver) driver for Mink framework
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
OpenTTD/py-protocol
OpenTTD's wire protocol as Python library
LGPL-2.1Oct 18, 2026 · metrics 2.10.0
Go
PeerVault/PeerVault-Service
DAEMON of PeerVault p2p secret vault cryptography secure
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
npm
PreMiD/Schemas
📝 Schemas used to validate files.
MPL-2.0Sep 14, 2026 · metrics 2.10.0
npm
QwantResearch/webrtc-swarm
Create a swarm of p2p connections using webrtc and a signalhub
MITOct 18, 2026 · metrics 2.10.0
—
RWS/language-cloud-public-api-samples
No repository description published.
Apache-2.0Oct 9, 2026 · metrics 2.10.0
Go
RainThings/XrayR
No repository description published.
MPL-2.0Sep 10, 2026 · metrics 2.10.0
npm
Sunbird-inQuiry/player
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
—
SwissDataScienceCenter/renku-search
No repository description published.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
TRowbotham/idna
An implementation of UTS#46 Unicode IDNA Compatibility Processing.
MITOct 9, 2026 · metrics 2.10.0
npm · Maven
TapResearch/react-native-tapresearch
A react native plugin for TapResearch
No licenseSep 14, 2026 · metrics 2.10.0
npm
TheThingsNetwork/eslint-config-ttn
Eslint config for use within The Things Network
MITSep 17, 2026 · metrics 2.10.0
—
Tinkerforge/thermal-imaging-bricklet
80x60 pixel thermal imaging camera
No licenseOct 18, 2026 · metrics 2.10.0
npm
Uauy-Lab/biojs-vis-expression-bar
No repository description published.
MITSep 9, 2026 · metrics 2.10.0
Go
Wind-River/ccli
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
—
adbancroft/avr-fast-div
Optimized integer division for AVR hardware
LGPL-2.1Oct 22, 2026 · metrics 2.10.0
crates.io
addr-rs/psl-types
Common types for the public suffix implementation crates
MITOct 20, 2026 · metrics 2.10.0
Go
adobe/thanos
Highly available Prometheus setup with long term storage capabilities.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
aellwein/terraform-provider-universe
A generic Terraform Provider with which you can code dynamic providers in any scripting language.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
—
aergoio/luajit
Modified LuaJIT engine used on Aergo
Custom licenseSep 12, 2026 · metrics 2.10.0
—
agentzh/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
No licenseSep 13, 2026 · metrics 2.10.0