Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,304
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
rust-random/rand
A Rust library for random number generation.
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
handshake-org/hsd
Handshake Daemon & Full Node
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
Tencent/cloudbase-framework
腾讯云开发云原生一体化部署工具 🚀 CloudBase Framework：一键部署，不限框架语言，云端一体化开发，基于Serverless 架构
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
yishn/tikzcd-editor
A simple visual editor for creating commutative diagrams.
MITOct 19, 2026 · metrics 2.10.0
npm
millermedeiros/js-signals
Custom Event/Messaging system for JavaScript inspired by AS3-Signals
No licenseOct 18, 2026 · metrics 2.10.0
Go
tjfoc/gmsm
GM SM2/3/4 library based on Golang (基于Go语言的国密SM2/SM3/SM4算法库)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
petertodd/python-bitcoinlib
Python3 library providing an easy interface to the Bitcoin data structures and protocol.
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
Noovolari/leapp
Leapp is the DevTool to access your cloud
MPL-2.0Oct 20, 2026 · metrics 2.10.0
Go
SpatiumPortae/portal
Portal is a quick and easy command-line file transfer utility from any computer to another 🌌 ✨
MITOct 19, 2026 · metrics 2.10.0
Maven
Kotlin/kotlinx.html
Kotlin DSL for HTML
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
grafana-cold-storage/agent
Vendor-neutral programmable observability pipelines.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
gorilla/handlers
Package gorilla/handlers is a collection of useful middleware for Go HTTP services & web applications 🛃
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
Go
tj/mmake
Modern Make
No licenseOct 19, 2026 · metrics 2.10.0
Go
mitchellh/cli
A Go library for implementing command-line interfaces.
MPL-2.0Oct 21, 2026 · metrics 2.10.0
NuGet
nhibernate/fluent-nhibernate
Fluent NHibernate!
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Maven
java-json-tools/json-schema-validator
A JSON Schema validation implementation in pure Java, which aims for correctness and performance, in that order
Custom licenseOct 19, 2026 · metrics 2.10.0
Go · npm
Kodiqa-Solutions/VaultS3
Lightweight, S3-compatible object storage server with built-in web dashboard. Single binary, low memory, encryption at rest.
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
Go
f/mcptools
A command-line interface for interacting with MCP (Model Context Protocol) servers using both stdio and HTTP transport.
MITOct 21, 2026 · metrics 2.10.0
npm · RubyGems
kantord/just-dashboard
:bar_chart: :clipboard: Dashboards using YAML or JSON files
MITOct 18, 2026 · metrics 2.10.0
—
dimforge/bevy_rapier
Official Rapier plugin for the Bevy game engine (MOVED to the rapier monerepo).
No licenseOct 20, 2026 · metrics 2.10.0
npm
expo/react-native-action-sheet
A cross-platform ActionSheet for React Native
MITOct 22, 2026 · metrics 2.10.0
npm
oxen-io/session-desktop
Session Desktop - Onion routing based messenger [DEPRECATED SEE README]
GPL-3.0Oct 20, 2026 · metrics 2.10.0
RubyGems
technicalpickles/jeweler
Opinionated tool for creating and managing Rubygem projects
MITOct 20, 2026 · metrics 2.10.0
Maven
bootique/bootique
Bootique is a minimally opinionated platform for modern runnable Java apps.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
akshathjain/sliding_up_panel
A draggable Flutter widget that makes implementing a SlidingUpPanel much easier!
Custom licenseOct 18, 2026 · metrics 2.10.0
npm
heluxjs/helux
A reactive atomic state engine for React(including React 18) and all React like, carrying dependency collection feature, supporting fine-grained updates.
MITOct 21, 2026 · metrics 2.10.0
Go
akavel/rsrc
Tool for embedding .ico & manifest resources in Go programs for Windows.
MITOct 21, 2026 · metrics 2.10.0
Go
warrant-dev/warrant
Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
grpc-ecosystem/go-grpc-prometheus
Prometheus monitoring for your gRPC Go servers.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
ghost1372/HandyControls
Contains some simple and commonly used WPF controls based on HandyControl
MITOct 22, 2026 · metrics 2.10.0