Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,068
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
grafana/github-api-commit-action
Commits changes to the repository through the Github api instead of traditional git commands.
MITSep 19, 2026 · metrics 2.10.0
crates.io
informalsystems/malachite
Flexible BFT consensus engine in Rust
Apache-2.0Sep 18, 2026 · metrics 2.10.0
—
lgirdk/mtd-utils
No repository description published.
GPL-2.0Sep 18, 2026 · metrics 2.10.0
Go
linode-obs/nagios_exporter
A Prometheus exporter for Nagios
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io
oliver-giersch/tagptr
Marked raw and atomic pointers for concurrent programming
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · crates.io
penumbra-zone/reindexer
A tool for reindexing historical Penumbra data
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
sanprojects/interceptor
Intercept php functions
MITSep 21, 2026 · metrics 2.10.0
crates.io
servo/futf
Handling fragments of UTF-8 in Rust
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
sfackler/fallible-streaming-iterator
No repository description published.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
solana-labs/llvm-builder
Builds customized LLVM for Solana
No licenseSep 19, 2026 · metrics 2.10.0
—
CaiJinHao/Jh.Abp.QuickComponents
Abp webapi项目需要使用的基础组件。Swagger、MIniProfiler、IdentityServer等，帮助以最快的时间启动你的项目，只需要关注主要业务
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go · npm
Ebonsignori/gh-search-docs
A `gh` CLI extension for searching GitHub Docs from your terminal.
MITSep 20, 2026 · metrics 2.10.0
Go · npm
Esword618/p2t-app
Mathpix 开源版 p2t-app
No licenseSep 19, 2026 · metrics 2.10.0
NuGet
Metalnem/noisesocket
.NET Standard 1.3 implementation of the NoiseSocket Protocol (revision 2 of the spec)
MITSep 19, 2026 · metrics 2.10.0
crates.io
aptos-labs/x25519-dalek
X25519 elliptic curve Diffie-Hellman key exchange in pure-Rust, using curve25519-dalek.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
—
ashutoshvarma/libxpdf
Static library built from source of www.xpdfreader.com with most of dependencies built within
No licenseSep 20, 2026 · metrics 2.10.0
—
cucumber/gherkin-c
[READ-ONLY] Gherkin for C - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/gherkin
MITSep 19, 2026 · metrics 2.10.0
Go
davidlazar/go-crypto
Cryptographic packages for Go
MITSep 23, 2026 · metrics 2.10.0
—
donovan-h-parks/ExpressBetaDiversity
Taxon- and phylogenetic-based beta diversity measures.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
fiverr/i18n.js
🗨️ Isomorphic translation engine. Mimics Rails' i18n interface.
No licenseSep 23, 2026 · metrics 2.10.0
Go
hhrutter/lzw
An extended version of compress/lzw.
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
crates.io
japaric/as-slice
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
kairos-io/immucore
:hedgehog: The Kairos immutability management interface
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
kartik-v/yii2-bootstrap4-dropdown
Enhanced Bootstrap 4 dropdown widget for Yii2 framework with nested submenu support.
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io · PyPI
matyushkin/djvu-rs
Pure-Rust DjVu codec — decode and encode DjVu documents. MIT licensed, no GPL dependencies.
MITSep 23, 2026 · metrics 2.10.0
Go
tinkernels/doh-proxy
A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
tk0miya/docutils-stubs
No repository description published.
UnlicenseSep 17, 2026 · metrics 2.10.0
Go
unit-io/unitdb-go
Lightweight and high performance publish-subscribe messaging system - Go client library.
MITSep 19, 2026 · metrics 2.10.0
Packagist
voximplant/apiclient-php
Voximplant Management API PHP client library
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
3rd-Eden/fn.name
Extract the name from a function.
MITSep 23, 2026 · metrics 2.10.0