Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,303
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
phplrt/source-factory-contracts
[READ ONLY] Subtree split of the phplrt source factory contracts component (see phplrt/phplrt)
MITOct 22, 2026 · metrics 2.10.0
—
pioarduino/mkfatfs
A tools use for pack/unpack flash file system.
No licenseOct 22, 2026 · metrics 2.10.0
crates.io
pjsier/dicom-rs
Pure Rust implementation of the DICOM standard
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
podvoyskiy/fuzzymatch
Fuzzy Matching Library for Go
MITOct 22, 2026 · metrics 2.10.0
Go
potocnikj/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
PyPI
prryplatypus/sanic
Accelerate your web app development | Build fast. Run fast.
MITOct 20, 2026 · metrics 2.10.0
Go
pulse-network/go-pulse
No repository description published.
LGPL-3.0Oct 18, 2026 · metrics 2.10.0
npm
qatrehai/persian-normalize
Normalize Persian and Arabic-script text — ZWNJ, Arabic yeh/kaf, three digit sets, diacritics. Zero dependencies, TypeScript types.
MITOct 18, 2026 · metrics 2.10.0
Go
ragul28/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Packagist · npm
rasuvaeff/property-testing-core
Framework-agnostic property-based testing engine: generators, shrinking, runner, regression corpus, events
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Packagist · npm
rasuvaeff/understudy
Test doubles for PHP 8.3–8.5 with a call-closure API, matchers, expectations, sequences, verification, and Testo/PHPUnit/Psalm/PHPStan adapters.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Go
rbaderts/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Go
rc452860/diff
A library for diffing golang structures
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Go
rchernanko/gosoline
Gosoline is our framework which fuels all of our Golang applications
No licenseOct 21, 2026 · metrics 2.10.0
RubyGems
renesugar/sous
Tools for building, testing, deploying Docker containers
MITOct 20, 2026 · metrics 2.10.0
Go
rghetia/opencensus-go
A stats collection and distributed tracing framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
rjspotter/soar
SQL Optimizer And Rewriter
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
robd003/sanic
Accelerate your web app development | Build fast. Run fast.
MITOct 20, 2026 · metrics 2.10.0
Go
rockwotj/avro
A fast Go Avro codec
MITOct 18, 2026 · metrics 2.10.0
Go
ronhuafeng/llmcaller-codex-go
Archived: use github.com/ronhuafeng/llm-go/llmcaller/codex; legacy v0.4.2 is immutable
MITOct 21, 2026 · metrics 2.10.0
Go
ronhuafeng/llmkit-go
Archived: use github.com/ronhuafeng/llm-go/llmkit; legacy v0.5.0 is immutable
MITOct 20, 2026 · metrics 2.10.0
—
rtbo/dbuild
write D code to build native packages
MITOct 19, 2026 · metrics 2.10.0
—
rwjblue/ember-qunit-builds
No repository description published.
No licenseOct 18, 2026 · metrics 2.10.0
Go · npm
ryuichi1208/actionlint
:octocat: Static checker for GitHub Actions workflow files
MITOct 17, 2026 · metrics 2.10.0
Go
sagansystems/terraform-provider-snowflake
Terraform provider for managing Snowflake accounts
MITOct 19, 2026 · metrics 2.10.0
—
sapcc/logstash_exporter
Prometheus exporter for Logstash metrics
MITOct 20, 2026 · metrics 2.10.0
crates.io
sappenin/interledger-rs
(Work In Progress) Interledger implementation in Rust
No licenseOct 19, 2026 · metrics 2.10.0
Go
schubydoo/balenamcp
MCP server wrapping the balena CLI — fleets, devices, releases, tags, env vars
MITOct 20, 2026 · metrics 2.10.0
Go
scott-vincent/refresh
No repository description published.
MITOct 21, 2026 · metrics 2.10.0
—
sctyner/tidytuesday
Official repo for the #tidytuesday project
CC0-1.0Oct 22, 2026 · metrics 2.10.0