Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,739
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
nrfconnect/sdk-hal_nordic
NCS downstream of https://github.com/zephyrproject-rtos/hal_nordic
No licenseJul 23, 2026 · metrics 2.10.0
Go
operator-framework/oria-operator
No repository description published.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
crates.io
phillord/pretty_rdf
No repository description published.
No licenseAug 22, 2026 · metrics 2.10.0
npm
polytope-labs/hyperbridge-sdk
Collection of supporting tools and libraries for hyperbridge developers
MITJul 20, 2026 · metrics 2.10.0
npm
pshenmic/dash-platform-sdk
A lightweight Javascript Dash Platform SDK
MITJul 20, 2026 · metrics 2.10.0
Packagist
returnearly/laravel-enums
A package to generate PHP 8.1 Enums, and adds Laravel Collection helpers around them.
MITAug 5, 2026 · metrics 2.10.0
PyPI
ripl-org/sirad
SIRAD: Secure Infrastructure for Research with Administrative Data
Custom licenseAug 23, 2026 · metrics 2.10.0
crates.io · npm
risingwavelabs/rw-diagnose-tools
Toolset for diagnosing Risingwave clusters.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go
runixer/laplaced
A lightweight, self-hosted Personal AI Daemon written in Go. Features Hybrid RAG (SQLite + Vectors), Long-term Memory, and Voice I/O. Optimized for low-end VPS and Raspberry Pi.
MITJul 21, 2026 · metrics 2.10.0
NuGet
skbkontur/edi-api-client
EDI API client
MITJul 29, 2026 · metrics 2.10.0
RubyGems
smartcontractkit/old-chainlink-ruby-docs
Beautiful static documentation for your API
Custom licenseJul 19, 2026 · metrics 2.10.0
Packagist
spiral/files
[READ ONLY] File Toolkit: atomic file manager, virtual file streams. Subtree split of the Spiral Files component (see spiral/framework)
MITAug 22, 2026 · metrics 2.10.0
Packagist
spiral/pagination
[READ ONLY] Common pagination interfaces. Subtree split of the Spiral Pagination component (see spiral/framework)
MITAug 22, 2026 · metrics 2.10.0
Go · npm
src-d/landing
landing for source{d}
MITJul 28, 2026 · metrics 2.10.0
Packagist
temporalio/sdk-php-interceptors-opentelemetry
Opentelemetry interceptors package for PHP SDK
MITAug 9, 2026 · metrics 2.10.0
Packagist
tomatophp/console-helpers
tons of helper you need for you artisan command line application
MITAug 4, 2026 · metrics 2.10.0
Maven
toronik/env
No repository description published.
MITJul 24, 2026 · metrics 2.10.0
Go
utox39/oh-my-update
oh-my-zsh plugin/theme updater
MITJul 20, 2026 · metrics 2.10.0
Go
wailsapp/mimetype
A fast Golang library for media type and file extension detection, based on magic numbers
MITAug 22, 2026 · metrics 2.10.0
Go
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
MITJul 23, 2026 · metrics 2.10.0
npm
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/is-decimal
Check if a character is decimal
MITAug 4, 2026 · metrics 2.10.0
Go
x1hy9/Go-cms-scan
一个Go语言创造的cms扫描器
No licenseAug 2, 2026 · metrics 2.10.0
Packagist
yiisoft/psr-dummy-provider
Dummy PSR provider
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
crates.io
0xMiden/p3-miden
Miden-specific Plonky3-based crates
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Maven
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
LGPL-3.0Jul 21, 2026 · metrics 2.10.0
crates.io
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
LGPL-3.0Aug 15, 2026 · metrics 2.10.0
Packagist
Art4/urllinker
🔗 UrlLinker converts any web addresses in plain text into HTML hyperlinks.
GPL-3.0Aug 14, 2026 · metrics 2.10.0
Go
Behnam-RK/dezhban
Cross-platform network kill switch (Go) — blocks traffic by geo-IP country
MITJul 18, 2026 · metrics 2.10.0
PyPI
CyrusBiotechnology/dj-bioinformatics-protein
Django utilities and tools for protein storage and manipulation
MITSep 8, 2026 · metrics 2.10.0