Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,333
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
Adamant-im/adamant
ADAMANT Blockchain Node
GPL-3.0Sep 16, 2026 · metrics 2.10.0
crates.io
RustCrypto/password-hashes
Password hashing functions / KDFs
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITSep 16, 2026 · metrics 2.10.0
Go
flyingmutant/rapid
Rapid is a modern Go property-based testing library
MPL-2.0Oct 21, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Custom licenseOct 19, 2026 · metrics 2.10.0
—
UniSecurityGuard/UniSecurityGuard
本科华五，曾赴美qs50读博，某兄弟院校副教授，校园门卫亭女性主理人，为防止炸号的备份平台，是本人。
No licenseSep 12, 2026 · metrics 2.10.0
npm
epam/ketcher
Web-based molecule sketcher
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
quasilyte/go-ruleguard
Define and run pattern-based custom linting rules.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
—
MyraUI/Myra
UI Library for MonoGame, FNA and Stride
MITSep 12, 2026 · metrics 2.10.0
npm
wp-statistics/GeoLite2-City
Free MaxMind GeoLite2-City database for IP geolocation. Auto-updated, served via jsDelivr CDN. No API keys required.
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
smi2/phpClickHouse
php ClickHouse wrapper
MITSep 24, 2026 · metrics 2.10.0
PyPI
yukinarit/pyserde
Yet another serialization library on top of dataclasses, inspired by serde-rs.
MITSep 20, 2026 · metrics 2.10.0
NuGet
DevTeam/Pure.DI
Pure DI for .NET
MITSep 12, 2026 · metrics 2.10.0
PyPI
ikvk/imap_tools
Work with email by IMAP
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
petersalomonsen/wasm-git
GIT for nodejs and the browser using https://libgit2.org compiled to WebAssembly with https://emscripten.org
Custom licenseSep 12, 2026 · metrics 2.10.0
—
MyGUI/mygui
Fast, flexible and simple GUI.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
browserslist/update-db
CLI tool to update caniuse-lite to refresh target browsers from Browserslist config
MITSep 16, 2026 · metrics 2.10.0
PyPI
Xilinx-CNS/onload
OpenOnload high performance user-level network stack
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
gemini-testing/testplane
Testplane (ex-hermione) browser test runner based on mocha and wdio
MITSep 13, 2026 · metrics 2.10.0
npm
gemini-testing/looks-same
Node.js library for comparing images
MITSep 29, 2026 · metrics 2.10.0
—
rairprotocol/dev-dapp-season1
Learn how to deploy open-source Dapps while participating in our incentives program
GPL-3.0Sep 12, 2026 · metrics 2.10.0
Packagist
defstudio/telegraph
Telegraph is a Laravel package for fluently interacting with Telegram Bots
MITSep 12, 2026 · metrics 2.10.0
Hex
elixir-waffle/waffle
Flexible file upload and attachment library for Elixir
No licenseSep 9, 2026 · metrics 2.10.0
Packagist
JBZoo/Utils
Collection of useful PHP functions, mini-classes, and snippets for every day.
MITSep 12, 2026 · metrics 2.10.0
npm · PyPI
invergent-ai/surogate
Train and serve LLMs at extreme speed and massive throughput.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm · Go
vshulcz/deja-vu
One memory shared by Claude Code, Codex, Cursor, Copilot CLI, OpenClaw and 20 more coding agents, built from the session history already on disk. A fix found in one agent comes back in any of them, including months of sessions from before you installed it. No LLM, no embeddings, one local Go binary.
MITSep 12, 2026 · metrics 2.10.0
Go
lesovsky/noisia
Harmful workload generator for PostgreSQL
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
RubyGems
Envek/after_commit_everywhere
Use ActiveRecord transactional callbacks outside of models, literally everywhere in your application.
MITSep 11, 2026 · metrics 2.10.0
crates.io
RustCrypto/block-ciphers
Collection of block cipher algorithms written in pure Rust
No licenseAug 27, 2026 · metrics 2.10.0
PyPI
Cyberdrop-DL/cyberdrop-dl
Bulk asynchronous downloader for multiple file hosts
GPL-3.0Oct 17, 2026 · metrics 2.10.0