Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,607
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
hansihe/wasmtime
Standalone JIT-style runtime for WebAssembly, using Cranelift
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
hanzo-ds/go
Hanzo Datastore Go client
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
hanzo-ds/mock
Mock server for testing Hanzo Datastore clients
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
hanzo-ds/native
Hanzo Datastore — native protocol (de-branded fork of ch-go)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
hanzo-git/actions-proto-go
Hanzo Git Actions wire protocol (fork of gitea.dev/actions-proto-go, wire-identical)
MITOct 23, 2026 · metrics 2.10.0
Go
hanzo-go/sdk
Hanzo AI SDK for Go — agents, cloud, inference.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
hanzoai/account
No repository description published.
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI · Go
hanzoai/agent
Multi-agent SDK with OpenAI-compatible API
MITOct 18, 2026 · metrics 2.10.0
Go · npm
hanzoai/agents
No repository description published.
MITOct 23, 2026 · metrics 2.10.0
Go
hanzoai/authz
Hanzo Authz — access control library for Go: ACL, RBAC, ABAC policy enforcement
Custom licenseSep 13, 2026 · metrics 2.10.0
Go · npm
hanzoai/base
Hanzo Base — multi-tenant SQLite backend with polyglot in-process extension runtimes and age-encrypted WAL replication; the storage substrate of the Hanzo cloud.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
hanzoai/beego
Hanzo fork of beego v2 — prometheus/client_golang stripped, luxfi/metric backend (0 prom/grpc)
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
hanzoai/brand
Official brand assets and design system for Hanzo AI
MITOct 22, 2026 · metrics 2.10.0
Go · npm · PyPI
hanzoai/cd
Declarative Continuous Deployment for Kubernetes
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
hanzoai/cek
No repository description published.
MITOct 19, 2026 · metrics 2.10.0
Go
hanzoai/clickhouse-go-mock
SUPERSEDED by hanzo-ds/mock — the datastore family lives in the hanzo-ds org (go, mock, native, driver, connect, pool, sqlbuilder, sqlparser, js, rs, cpp). Kept only as a pre-debrand snapshot from cloud's embedded git.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
hanzoai/cloud
Hanzo Cloud — OSS core. One Go binary. Dual-licensed Apache-2.0 OR MIT.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go · npm
hanzoai/commerce
Multi-tenant commerce and billing — orders, subscriptions, invoices, plans, usage metering and a credit ledger. One Go binary. MIT OR Apache-2.0.
Custom licenseOct 18, 2026 · metrics 2.10.0
Go
hanzoai/csqlite
Self-contained cgo SQLite bindings for Go's database/sql, vendored in-tree
MITOct 22, 2026 · metrics 2.10.0
Go · npm · PyPI
hanzoai/dataroom
Open-source document-sharing platform with shareable links, analytics, and custom domains.
Custom licenseOct 18, 2026 · metrics 2.10.0
Go
hanzoai/dbx
A Go (golang) package that enhances the standard database/sql package by providing powerful data retrieval methods as well as DB-agnostic query building capabilities.
MITOct 22, 2026 · metrics 2.10.0
Go
hanzoai/decimal
Exact big.Int fixed-point decimal for Go — no precision ceiling, no float
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
hanzoai/docdb
MongoDB-compatible document database
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
hanzoai/doctype
DocType — metadata-driven schema primitive in pure Go (Frappe DocType core, no Python runtime)
Custom licenseSep 19, 2026 · metrics 2.10.0
Go · npm
hanzoai/esign
Self-hosted document e-signature platform, an open source alternative to DocuSign.
AGPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
hanzoai/eval
Expression evaluator (Go) forked from casbin/govaluate v1.3.0; package renamed to eval.
MITOct 18, 2026 · metrics 2.10.0
crates.io · Go · npm +1
hanzoai/flags
Feature flags + A/B for the Hanzo platform — one native engine (cloud /v1/flags), SDKs for Go, Python, TypeScript, Rust, C FFI
MITSep 19, 2026 · metrics 2.10.0
Go
hanzoai/framework
Hanzo Framework — the Go DocType engine: store, hooks, modules, permissions. Foundation for CMS/ERP/CRM/Helpdesk.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
hanzoai/gateway
Hanzo Gateway — the stateless trust boundary at api.hanzo.ai: IAM identity, rate limiting, metering and CORS, then a straight forward to cloud. Routing lives in cloud, not here.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
hanzoai/go-cosyvoice
No repository description published.
MITSep 13, 2026 · metrics 2.10.0