Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,304
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
sshaplygin/docs-code
Official documents codes validation and generation in Go
MITOct 20, 2026 · metrics 2.10.0
Go
mayakovskiyy/engraulis
A monitoring microservice written in Go
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
Packagist
spiral/security
[READ ONLY] RBAC security layer based on NIST definition, role/rule/permission associations, bulletproof. Subtree split of the Spiral Security component (see spiral/framework)
MITOct 20, 2026 · metrics 2.10.0
npm
wert-io/widget-initializer
Public NPM library for Wert partners to integrate. Also published to https://javascript.wert.io
No licenseOct 21, 2026 · metrics 2.10.0
Maven
bootique/bootique-jdbc
JDBC DataSource integration with Bootique
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
gravity-ui/playwright-tools
No repository description published.
MITOct 19, 2026 · metrics 2.10.0
npm · Maven
mindbox-cloud/react-native-sdk
No repository description published.
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
spiral/files
[READ ONLY] File Toolkit: atomic file manager, virtual file streams. Subtree split of the Spiral Files component (see spiral/framework)
MITOct 20, 2026 · metrics 2.10.0
Packagist
spiral/pagination
[READ ONLY] Common pagination interfaces. Subtree split of the Spiral Pagination component (see spiral/framework)
MITOct 20, 2026 · metrics 2.10.0
npm
weirdpattern/eslint-config-typescript
An opinionated set of ESLint rules for TypeScript projects
MITOct 18, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/status-generator
Translation status generator for Laravel Lang projects.
MITOct 20, 2026 · metrics 2.10.0
Go · npm
hanzoai/ai
Hanzo AI — LLM control plane, RAG, and model hub. Native Go routing for 66+ models over an OpenAI-compatible /v1 API; mounts as the 'ai' subsystem inside hanzoai/cloud.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
modern-python/eof-fixer
CLI tool that ensures text files end with exactly one newline
MITOct 22, 2026 · metrics 2.10.0
Packagist
moonshine-software/import-export
No repository description published.
MITOct 21, 2026 · metrics 2.10.0
Packagist
spiral/reactor
[READ ONLY] Code Scaffolding using declarative OOP wrappers. Subtree split of the Spiral Reactor component (see spiral/framework)
MITOct 20, 2026 · metrics 2.10.0
Go
tarantool/go-discovery
Discovery library for Tarantool 3.0 written on Golang
BSD-2-ClauseOct 19, 2026 · metrics 2.10.0
NuGet
WildGums/Orc.Automation
No repository description published.
Custom licenseOct 20, 2026 · metrics 2.10.0
NuGet
WildGums/Orc.CsvTextEditor
Text editor component for CSV files
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
gumeniukcom/golang-jsonrpc2
Library JSONRPC2.0 for golang
MITOct 22, 2026 · metrics 2.10.0
PyPI
modern-python/faststream-concurrent-aiokafka
Concurrent message-processing middleware for FastStream + aiokafka
MITOct 22, 2026 · metrics 2.10.0
—
natural-transformation/spoonbill
A server-side single-page application framework for Scala — build reactive web apps with no JavaScript (formerly Korolev)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
oberlevd/platform-lib
No repository description published.
No licenseOct 19, 2026 · metrics 2.10.0
Go
vmkteam/topsrv
No repository description published.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Hex
vshakitskiy/websocks
🧦 WebSocket protocol in Gleam
Apache-2.0Oct 22, 2026 · metrics 2.10.0
NuGet
FontStashSharp/FontStashSharp.Base
Base Interfaces for FontStashSharp
ZlibOct 21, 2026 · metrics 2.10.0
Go · npm
anmaslov/simple-rag
No repository description published.
No licenseOct 19, 2026 · metrics 2.10.0
PyPI · npm
arazshah/smart_spatial_system
Plugin-based GeoAI system: natural-language questions become QuerySpecs, DAG plans and map layers, tables and PDF reports. Built on geochat-platform.
MITOct 22, 2026 · metrics 2.10.0
Go
easyp-tech/service
gRPC service for running protobuf plugins in Docker containers
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
gatewayd-io/plugin-template-go
GatewayD plugin template in Go
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go · npm · PyPI
hanzoai/ingress
Hanzo Ingress -- cloud-native, Kubernetes-native L7 reverse proxy and load balancer for Hanzo AI infrastructure (automatic TLS, dynamic config, zero-downtime reloads).
MITOct 21, 2026 · metrics 2.10.0