Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,111
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go · npm
backmarket-oss/k8s-image-swapper
:wheel_of_dharma: Mirror images into your own registry and swap image references automatically.
MITSep 20, 2026 · metrics 2.10.0
Go
blackwell-systems/gcp-iam-control-plane
Control plane for local GCP emulators. Single policy file drives IAM enforcement across Secret Manager, KMS, and more. Test production authorization behavior without GCP credentials.
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
bmish/eslint-plugin-eslint-plugin
An ESLint plugin for linting ESLint plugins
MITSep 19, 2026 · metrics 2.10.0
PyPI
brettcannon/importlib
Packaging for importlib from Python 2.7 for the Cheeseshop/PyPI
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
cdvelop/skillsearch
A minimalist Go library for SQL-based MCP skill discovery and LLM context optimization.
MITSep 19, 2026 · metrics 2.10.0
Go
cgroschupp/terraform-provider-confluent-cloud
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Go
cpplain/lnk
Opinionated symlink manager for dotfiles
MITSep 19, 2026 · metrics 2.10.0
RubyGems
cucumber/messages-ruby
[READ ONLY] Cucumber Messages for Ruby (Protocol Buffers) - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/messages
MITSep 19, 2026 · metrics 2.10.0
Go
despinoza9/dns-tools
DNS tools for zone signature (file, pkcs11-hsm) and validation, and zone digest (ZONEMD)
MITSep 17, 2026 · metrics 2.10.0
Go
dimuls/rtsp-simple-proxy
ready-to-use RTSP proxy
MITSep 19, 2026 · metrics 2.10.0
Go
drsh4dow/google-cloud-go
Google Cloud Client Libraries for Go.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
epiccoolguy/go-bitfield
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
npm
fannarsh/prefect
Manages node's built-in cluster module
MITSep 20, 2026 · metrics 2.10.0
—
getgauge/template-java
No repository description published.
CC0-1.0Sep 18, 2026 · metrics 2.10.0
Go
glycerine/shiny
Multiplatform Go UI and Window Rendering library
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
hongker/go-datastructures
A collection of useful, performant, and threadsafe Go datastructures.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
human2312/go-mitmproxy
mitmproxy implemented with golang. 用 Golang 实现的中间人攻击（Man-in-the-middle），解析、监测、篡改 HTTP/HTTPS 流量。
MITSep 20, 2026 · metrics 2.10.0
—
jacoblai/broker
go package implementing an extensible MQTT broker
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go · RubyGems
jattento/docker-volume-backup
Backup Docker volumes locally or to any S3, WebDAV, Azure Blob Storage, Dropbox or SSH compatible storage
MPL-2.0Sep 19, 2026 · metrics 2.10.0
—
jjchern/saipe
An R data package contains U.S. Poverty data from Census's SAIPE program
No licenseSep 20, 2026 · metrics 2.10.0
Go
jkosik/crypto_trader
Bot for spread trading of crypto currencies
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
jmorgadov/nesim
Paquete de python diseñado para simular una red de computadoras.
MITSep 18, 2026 · metrics 2.10.0
Go
jondkelley/cicd_golang_calculator
Golang multi-platform CI/CD system with a calculator
CC0-1.0Sep 19, 2026 · metrics 2.10.0
Go
kairos-io/kcrypt-discovery-challenger
:closed_lock_with_key: Kairos TPM encryption plugin
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
kazecreator/dsh-settings-pro
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
npm
klayrHQ/klayr-sdk
🔩 Klayr software development kit
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
lindehoff/Budget-Assist
Ta kontroll över din ekonomi med Budget Assist – din personliga assistent för budgetering och ekonomisk analys. Denna innovativa app använder avancerad artificiell intelligens för att automatiskt läsa in dina räkningar och kontotransaktioner, kategorisera dem och ge insikter om din privatekonomi.
Custom licenseSep 19, 2026 · metrics 2.10.0
—
liziwl/sustech-master-thesis
南方科技大学硕士毕业论文LaTeX模板
LPPL-1.3cSep 19, 2026 · metrics 2.10.0
Go
lyubomir-bozhinov/pullio
Because manually updating your repos is for people who enjoy watching paint dry or compiling Gentoo.
MITSep 19, 2026 · metrics 2.10.0
—
memgraph/gflags
The gflags package contains a C++ library that implements commandline flags processing. It includes built-in support for standard types such as string and the ability to define flags in the source file in which they are used. Online documentation available at:
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0