Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,022
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
Web3Auth/single-factor-auth
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
Go
alexandrestein/gotinydb
A simple pure Golang database
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
artela-network/cometbft-db
Database wrapper for CometBFT
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io
bincode-org/unty
A crate that allows you to mostly-safely cast one type into another type.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
broxus/cassadilia
kv blob storage
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
cucumber/gherkin-ruby
[READ-ONLY] Gherkin for Ruby - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/gherkin
MITSep 19, 2026 · metrics 2.10.0
crates.io
dusk-network/nstack
Stack data structure
MPL-2.0Sep 23, 2026 · metrics 2.10.0
Go
evstack/gm
A repository of the completed gm-world tutorial.
No licenseSep 19, 2026 · metrics 2.10.0
Go · npm
getAlby/nostr-wallet-connect-next
Nostr Wallet Connect (NIP-47) application to allow apps to connect to your node
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
getsentry/rust-debugid
Identifiers for code and debug files.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
gotify/configor
Go configuration library that supports JSON, YAML, TOML and Environment Variables
No licenseSep 19, 2026 · metrics 2.10.0
—
ipdk-io/stratum-dev
Stratum is an open source silicon-independent switch operating system for software defined networks.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
keidarcy/kubectl-execrec
A kubectl plugin that wraps `kubectl exec` with session recording capabilities for audit and debugging 📝
MITSep 18, 2026 · metrics 2.10.0
npm
octokit/plugin-request-log.js
Log all requests and request errors
MITSep 16, 2026 · metrics 2.10.0
npm
redhotvengeance/topl
JavaScript (Node.js and browser) meets TOML.
No licenseSep 20, 2026 · metrics 2.10.0
Go
thedatafoundation/story-geth
Go implementation of the Ethereum protocol
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go · npm
torrplay/torrplay
TorrPlay is a torrent streaming application.
MITSep 20, 2026 · metrics 2.10.0
—
vcabbage/trivialt
Go TFTP library with full standards support.
MITSep 18, 2026 · metrics 2.10.0
Go
vodolaz095/ldap4gin
Authenticator for gin framework using ldap server
MITSep 20, 2026 · metrics 2.10.0
npm
wooorm/array-iterate
`Array#forEach()` but it’s possible to define where to move to next
MITSep 23, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/config
Config repository for Laravel-Lang packages
MITSep 20, 2026 · metrics 2.10.0
Go
SagerNet/utls
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
crates.io
autonomys/substrate
Substrate: The platform for blockchain innovators
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
bigcommerce/data-store-js
A JavaScript library for managing application state
MITSep 20, 2026 · metrics 2.10.0
npm
boennemann/nerf-dart
No repository description published.
No licenseSep 23, 2026 · metrics 2.10.0
Go
chavacava/garif
A GO package to create and manipulate SARIF logs
MITSep 23, 2026 · metrics 2.10.0
npm
cloud-ru-tech/frontend-tools
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
cloudwavego/protoc-gen-gin
从 protobuf 文件中生成使用 gin 的 http rpc 服务 (protobuf to gin code)
MITSep 19, 2026 · metrics 2.10.0
npm · crates.io
dfinity/verifiable-credentials-sdk
Repository containing a set of libraries to manage the verifiable credentials in Internet Computer
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
difyz9/markdown2tts
一个功能完整、高性能的文本(MarkDown)转语音(TTS)应用程序，支持 双引擎、并发处理、智能过滤 等特色功能。
MITSep 19, 2026 · metrics 2.10.0