Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,014
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
chavacava/garif
A GO package to create and manipulate SARIF logs
MITSep 23, 2026 · metrics 2.10.0
npm
cloud-ru-tech/frontend-tools
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
cloudwavego/protoc-gen-gin
从 protobuf 文件中生成使用 gin 的 http rpc 服务 (protobuf to gin code)
MITSep 19, 2026 · metrics 2.10.0
npm · crates.io
dfinity/verifiable-credentials-sdk
Repository containing a set of libraries to manage the verifiable credentials in Internet Computer
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
difyz9/markdown2tts
一个功能完整、高性能的文本(MarkDown)转语音(TTS)应用程序，支持 双引擎、并发处理、智能过滤 等特色功能。
MITSep 19, 2026 · metrics 2.10.0
Maven
fluxninja/aperture-java
SDK to interact with Aperture Agent
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
go-gorm/rawsql
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go · npm
iulita-ai/iulita
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
libp2p/go-libp2p-asn-util
[WIP] A library for IP -> ASN mapping. ONLY supports lookups on IPv6 addresses for now.
MITSep 23, 2026 · metrics 2.10.0
—
libpoet/poet
The Performance with Optimal Energy Toolkit
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Packagist · npm
pixinvent/vuexy-laravel-bootstrap-jetstream
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
crates.io
soc/option-ext
moved to htps://codeberg/soc/option-ext
MPL-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
temporalio/sdk-php-interceptors-opentelemetry
Opentelemetry interceptors package for PHP SDK
MITSep 17, 2026 · metrics 2.10.0
—
the-this-pointer/glcd-font-calculator
Font Generator for SSD1306 OLED LCD and STM32F1 HAL Library
No licenseSep 21, 2026 · metrics 2.10.0
crates.io
thomcc/rust-base16
Base16 (hex) encoding functions for rust
UnlicenseSep 18, 2026 · metrics 2.10.0
npm
wooorm/ccount
Count how often a substring occurs
MITSep 16, 2026 · metrics 2.10.0
Go
ydb-platform/terraform-provider-ydb
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
3rd-Eden/enabled
Check if a certain flag is enabled.
MITSep 23, 2026 · metrics 2.10.0
Go
Lemon4ksan/aoni
❄️ Ultra-fast unified internet protocol stack for Go
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go · RubyGems
MimoJanra/confkit
Typed, validated configuration loading for Go — no more stringly-typed config, boilerplate, or cryptic error messages.
MITSep 19, 2026 · metrics 2.10.0
npm · Maven
Phil0xFF/capacitor-jailbreak-root-detection
Jailbreak Root detection plugin for capacitor.
No licenseSep 18, 2026 · metrics 2.10.0
npm
RunDevelopment/regexp-ast-analysis
A library for analysing JS RegExp
MITSep 23, 2026 · metrics 2.10.0
Go
TrilliumIT/vxrouter
A vxlan networking and ipam plugin for docker clusters.
MITSep 19, 2026 · metrics 2.10.0
npm
binance/binance-toolbox-typescript
Toolbox for typescript connector
MITSep 20, 2026 · metrics 2.10.0
crates.io
bluss/rawpointer
Extra methods for raw pointers
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
frostyard/plow
debian package repository manager, 100% serverless with GH Actions and Pages
No licenseSep 19, 2026 · metrics 2.10.0
npm
imranbarbhuiya/eslint-config-mahir
My opinionated eslint config
MITSep 18, 2026 · metrics 2.10.0
crates.io
ncatelli/parcel
A small zero-dependency parser-combinator library for rust.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io · npm
ncatelli/scrap
A minimal command-line utility framework built with zero external dependencies
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Packagist
pear/Structures_Graph
Graph datastructure manipulation library
LGPL-3.0Sep 19, 2026 · metrics 2.10.0