Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,989
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · crates.io
hanzoai/cli
The Hanzo CLI — an AI coding agent and every product of the Hanzo cloud, in one Rust binary. curl -fsSL https://hanzo.sh | sh
Custom licenseOct 18, 2026 · metrics 2.10.0
npm · crates.io · Go
hanzoai/mcp
Model Context Protocol server with 260+ tools for AI agents
MITSep 19, 2026 · metrics 2.10.0
Go
hanzoai/research
Hanzo Research SDK (Go) — zero-config /v1/research self-logging client: structure runs as falsifiable tests (hypothesis → verdict), byte-compatible with the Python/Rust/C++ SDKs, universal open kinds
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
hanzoai/ui
React component library for AI applications
MITSep 20, 2026 · metrics 2.10.0
npm
harborclient/sdk
TypeScript definitions for HarborClient plugin development
No licenseSep 12, 2026 · metrics 2.10.0
NuGet
hekkaaa/NetObserver
NetObserver is an open source, cross-platform .NET Standard 2.0 library that implements a set of networking utilities. Installed as a Nuget packet.
MITSep 15, 2026 · metrics 2.10.0
PyPI
hintjens/czmq
High-level C binding for ØMQ
MPL-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
hodoulp/OpenColorIO
A color management framework for visual effects and animation.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Go
hongker/go-datastructures
A collection of useful, performant, and threadsafe Go datastructures.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems
honzasterba/memoist
ActiveSupport::Memoizable with a few enhancements
MITSep 11, 2026 · metrics 2.10.0
Go
houseme/wechat
WeChat SDK for Go （微信SDK：简单、易用）
Apache-2.0Oct 18, 2026 · metrics 2.10.0
—
hueychen27/Popcorn_Clicker
Click the popcorn.
MITSep 16, 2026 · metrics 2.10.0
npm
hueychen27/chat_app
This is a chat app.
No licenseSep 16, 2026 · metrics 2.10.0
Go
human2312/go-mitmproxy
mitmproxy implemented with golang. 用 Golang 实现的中间人攻击（Man-in-the-middle），解析、监测、篡改 HTTP/HTTPS 流量。
MITSep 20, 2026 · metrics 2.10.0
npm · crates.io
i-VRESSE/pdbtbx-ts
JS wrapper around pdbtbx rust crate
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
iGLOO-be/geopostcodes-sequelize-import
Import geopostcodes.com CSV into SQL databases with Sequelize.js
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
iamdavehart/tabbycat
tabbycat is an axios based javascript client for the tableau server rest api
MITAug 28, 2026 · metrics 2.10.0
Maven
icon-project/blst-java
No repository description published.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
igal-s/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0
Go
ikenchina/redis-GunYu
No repository description published.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
intermine/bluegenes-tool-cytoscape
Thin wrapper around the cytoscape-intermine library to present intermine gene & protein interaction networks in bluegenes
Custom licenseOct 21, 2026 · metrics 2.10.0
—
iresty/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
No licenseSep 13, 2026 · metrics 2.10.0
Go
ishii1648/tmux-sidebar
No repository description published.
No licenseSep 12, 2026 · metrics 2.10.0
Go
isometry/terraform-provider-github
Terraform GitHub provider
MITOct 12, 2026 · metrics 2.10.0
—
iv-org/protodec
Command-line tool to encode and decode arbitrary protobuf data
GPL-3.0Sep 11, 2026 · metrics 2.10.0
Go
jackofallops/terraform-provider-azurerm
Terraform Azure Resource Manager provider
MPL-2.0Sep 14, 2026 · metrics 2.10.0
—
jacoblai/broker
go package implementing an extensible MQTT broker
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
jasondeutsch/is
Is provides a quick, clean and simple framework for writing Go tests.
MITSep 22, 2026 · metrics 2.10.0
Go · RubyGems
jattento/docker-volume-backup
Backup Docker volumes locally or to any S3, WebDAV, Azure Blob Storage, Dropbox or SSH compatible storage
MPL-2.0Sep 19, 2026 · metrics 2.10.0
—
jdzmfg/Thinkintosh
This is a write up on how to hackintosh the Lenovo Thinkpad T440s
UnlicenseSep 16, 2026 · metrics 2.10.0