Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,154
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
Hccake/ballcat
😸一个快速开发脚手架，快速搭建企业级后台管理系统，并提供多种便捷starter进行功能扩展。主要功能包括前后台用户分离，菜单权限，数据权限，定时任务，访问日志，操作日志，异常日志，统一异常处理，XSS过滤，SQL防注入，国际化 等多种功能
MITOct 20, 2026 · metrics 2.10.0
npm
Hexamouse/hachipetshop_post
No repository description published.
No licenseSep 16, 2026 · metrics 2.10.0
—
Hyyped/toolscript
No repository description published.
Custom licenseSep 16, 2026 · metrics 2.10.0
Packagist
JBZoo/Markdown
Rendering markdown from PHP code
MITSep 12, 2026 · metrics 2.10.0
Go
JanDeDobbeleer/gopsutil
psutil for golang
Custom licenseSep 20, 2026 · metrics 2.10.0
Hex
JohnBjrk/adglent
Advent of code helper - automating setup of tests, solution template and problem input
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go
Klarrio/kafka-proxy
Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
LF-Engineering/aws-lambda-go-api-proxy
lambda-go-api-proxy makes it easy to port APIs written with Go frameworks such as Gin (https://gin-gonic.github.io/gin/ ) to AWS Lambda and Amazon API Gateway.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
Lemon4ksan/g-man-cli
Background deamon and sidecar cli for g-man bots ⚙️
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
Lemon4ksan/miyako
The Metropolitan Concurrency & Tactical Response Engine for Go
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
PyPI
LessThread/Noise2SamePro
Improved model of Noise2Same
No licenseSep 16, 2026 · metrics 2.10.0
Go
LinuxSuRen/api-testing-vault-extension
A Vault-based secret extension of api-testing.
No licenseSep 11, 2026 · metrics 2.10.0
crates.io
Lolirofle/endian-type
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Packagist
Lullabot/MinkSelenium2Driver
Selenium2 (webdriver) driver for Mink framework
No licenseSep 18, 2026 · metrics 2.10.0
npm · crates.io
ONREZA/nrz-cli
ONREZA platform CLI — dev, build, deploy
MITSep 12, 2026 · metrics 2.10.0
PyPI
OpenTTD/py-protocol
OpenTTD's wire protocol as Python library
LGPL-2.1Oct 18, 2026 · metrics 2.10.0
Go
PeerVault/PeerVault-Service
DAEMON of PeerVault p2p secret vault cryptography secure
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
npm
PookiePepelsss/Featherlua
No repository description published.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
PreMiD/Schemas
📝 Schemas used to validate files.
MPL-2.0Sep 14, 2026 · metrics 2.10.0
npm
QwantResearch/webrtc-swarm
Create a swarm of p2p connections using webrtc and a signalhub
MITOct 18, 2026 · metrics 2.10.0
—
RWS/language-cloud-public-api-samples
No repository description published.
Apache-2.0Oct 9, 2026 · metrics 2.10.0
Go
RainThings/XrayR
No repository description published.
MPL-2.0Sep 10, 2026 · metrics 2.10.0
Go
RezaKargar/go-clockwork
A Go port of Clockwork — the PHP debugging toolbar and request inspector that works with the Clockwork browser extension.
MITSep 9, 2026 · metrics 2.10.0
Go
Sumatoshi-tech/prompts
Prompts which we use in day-to-day coding
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
Sunbird-inQuiry/player
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
—
SwissDataScienceCenter/renku-search
No repository description published.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
TRowbotham/idna
An implementation of UTS#46 Unicode IDNA Compatibility Processing.
MITOct 9, 2026 · metrics 2.10.0
npm · Maven
TapResearch/react-native-tapresearch
A react native plugin for TapResearch
No licenseSep 14, 2026 · metrics 2.10.0
npm
TheThingsNetwork/eslint-config-ttn
Eslint config for use within The Things Network
MITSep 17, 2026 · metrics 2.10.0
—
Tinkerforge/thermal-imaging-bricklet
80x60 pixel thermal imaging camera
No licenseOct 18, 2026 · metrics 2.10.0