Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,291
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go · npm · PyPI
hanzoai/dataroom
Open-source document-sharing platform with shareable links, analytics, and custom domains.
Custom licenseOct 18, 2026 · metrics 2.10.0
Go
hanzoai/dbx
A Go (golang) package that enhances the standard database/sql package by providing powerful data retrieval methods as well as DB-agnostic query building capabilities.
MITOct 22, 2026 · metrics 2.10.0
Go
hanzoai/decimal
Exact big.Int fixed-point decimal for Go — no precision ceiling, no float
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
hanzoai/docdb
MongoDB-compatible document database
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go · npm
hanzoai/esign
Self-hosted document e-signature platform, an open source alternative to DocuSign.
AGPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
hanzoai/eval
Expression evaluator (Go) forked from casbin/govaluate v1.3.0; package renamed to eval.
MITOct 18, 2026 · metrics 2.10.0
Go
hanzoai/gateway
Hanzo Gateway — the stateless trust boundary at api.hanzo.ai: IAM identity, rate limiting, metering and CORS, then a straight forward to cloud. Routing lives in cloud, not here.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
hanzoai/ha
Single-writer election over a live membership set (HRW/Rendezvous) — Hanzo's HA coordination primitive. No coordinator, lock service, Postgres, or Redis.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
hanzoai/iamsdk
Hanzo IAM Go SDK — Go client for Hanzo IAM (forked + renamed from casdoor-go-sdk)
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
hanzoai/log
High-performance zero-allocation structured logging for Go
BSD-3-ClauseOct 18, 2026 · metrics 2.10.0
Go
hanzoai/metrics
[ARCHIVED] Superseded by hanzoai/o11y — one subsystem serves metrics, logs and traces at /v1/o11y/*
MITOct 22, 2026 · metrics 2.10.0
Go
hanzoai/money
Exact money (Amount+Currency) for Go on big.Int decimal — fiat + 18-dec crypto, no ceiling
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
hanzoai/namespace
No repository description published.
MITOct 18, 2026 · metrics 2.10.0
Go · npm · PyPI
hanzoai/o11y
Hanzo o11y — OpenTelemetry-native observability (metrics, traces, logs) for the Hanzo platform, backed by Hanzo Datastore.
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
hanzoai/orm
Generics-based ORM for Go — type-safe Model[T] with auto-registration, auto-serialization, KV cache, and multi-backend support (Hanzo SQLite, Hanzo SQL, Hanzo DocDB)
MITOct 22, 2026 · metrics 2.10.0
Go
hanzoai/otel-collector
Hanzo O11y Otel Collector — Hanzo's OpenTelemetry Collector distro: ZAP-native + OTLP ingest into hanzoai/datastore
AGPL-3.0Oct 21, 2026 · metrics 2.10.0
Go
hanzoai/search-go
Go client for Hanzo Index.
MITOct 22, 2026 · metrics 2.10.0
npm
hanzoai/social
Hanzo Social — publish to every account an org owns
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
hanzoai/sqlcipher
Pure-Go SQLCipher 4 page format — codec, KDF, per-page HMAC. Byte-compatible with SQLCipher 4.
BSD-3-ClauseOct 22, 2026 · metrics 2.10.0
Go
hanzoai/sqlite
Hanzo SQLite
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
hanzoai/stream
Kafka protocol adapter that lets standard Kafka clients run against Hanzo's NATS-based pub/sub.
MITOct 22, 2026 · metrics 2.10.0
Go
hanzoai/types
Values the Hanzo fleet shares. Standard library only.
MITOct 18, 2026 · metrics 2.10.0
crates.io
hanzoai/zen
Zen LM, the open model family from Zoo Labs Foundation (501(c)(3)). Use it on api.hanzo.ai.
No licenseOct 18, 2026 · metrics 2.10.0
Go
hanzoai/zip
DEPRECATED — dead fork. Canonical: github.com/zap-proto/zip. Do not import.
MITOct 18, 2026 · metrics 2.10.0
Packagist
kanopi/wordpress-core
No repository description published.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
kruzhok-team/gotalent
Клиент TalentAPI для Go
MITOct 20, 2026 · metrics 2.10.0
Go
ksanderer/go-micro
A Go agent harness and service framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go · npm
luxfi/bft
Lux BFT primitives: state machine replication interfaces and utilities for building Byzantine-tolerant Go services.
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go
luxfi/chains
Independent VM plugin binaries for the Lux Network
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
Go
luxfi/node
Lux node — Go, Rust and C++ runtimes at parity behind one Makefile and one conformance corpus. ZAP-native, BSD-3-Clause.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0