Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,124
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
ehmo/gomoufox
Go library, CLI, and MCP server for Camoufox browser automation.
Custom licenseSep 15, 2026 · metrics 2.10.0
Packagist
roadrunner-php/worker
Base PHP worker for RoadRunner server.
MITSep 18, 2026 · metrics 2.10.0
—
3F/7z.Libs
📦📦 🗜 An automated build of the `7z.Libs` NuGet packages.
MITSep 17, 2026 · metrics 2.10.0
npm
Akurganow/use-persisted-state
React useState hook with persistence to localStorage, sessionStorage, and extension storage (chrome.storage / browser.storage)
MITSep 18, 2026 · metrics 2.10.0
Go
go-toolsmith/astcopy
Package astcopy implements Go AST deep copy operations.
MITSep 16, 2026 · metrics 2.10.0
Go
vadiminshakov/marti
Go trading bot (DCA & AI strategies, crypto, Binance, Bybit)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · PyPI
ekhodzitsky/polyvoice
Speaker diarization for Rust — who spoke when, on CPU, without Python. INT8 kernels (~8.4 MB, MIT, ungated). Rust, Python, C FFI, and CLI.
MITSep 18, 2026 · metrics 2.10.0
npm
gravity-ui/onboarding
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
—
norksec/torcrack
A simple Tor enabled, multi-process SSH dictionary attack in Python3.
No licenseSep 16, 2026 · metrics 2.10.0
Go
tsung-sc/Tsung-Go-shopping-project
GO语言开发的一个WEB商城项目，采用的框架为BEEGO
MITSep 16, 2026 · metrics 2.10.0
Go · npm
vmkteam/reviewer
Review your PR via Claude Code/Codex/Opencode/LLM
No licenseSep 20, 2026 · metrics 2.10.0
npm
CapMonsterCloud/capmonster-nodejs-captcha-solver
Official Node.js / TypeScript SDK for CapMonster Cloud. Bypass reCAPTCHA, Cloudflare Turnstile, DataDome in Puppeteer and Playwright scripts.
MITSep 15, 2026 · metrics 2.10.0
Packagist
Codeception/base
Base Codeception distribution with minimal set of dependencies (excluding WebDriver and Guzzle)
MITSep 17, 2026 · metrics 2.10.0
npm · crates.io
VKCOM/swc-plugin-css-modules
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
—
dapi/memory-bank
Version-controlled context, governance, and delivery flows for coding agents.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
Duzopy/VRChat-Crasher
VRChat Crasher
No licenseSep 16, 2026 · metrics 2.10.0
npm
IPeCompany/SmsPanelV2.TypeScript
TypeScript Package
MITSep 18, 2026 · metrics 2.10.0
crates.io
estin/geosuggest
suggest by name or find nearest by coordinates cities
MITSep 17, 2026 · metrics 2.10.0
Hex
kortirso/chess
Elixir package for playing chess
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
Percona-Lab/pmm-submodules
A repo dedicated to building Percona Monitoring and Management (PMM)
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
Tellarion/webmaxsocket
webmaxsocket
No licenseSep 18, 2026 · metrics 2.10.0
npm
bad4iz/crypto-pro-cadesplugin
JavaScript-библиотека для работы с сертификатами и создания электронной подписи через «КриптоПро ЭЦП Browser plug-in».
MITSep 19, 2026 · metrics 2.10.0
npm
dy/hyperf
Hypertext fragment builder
No licenseSep 20, 2026 · metrics 2.10.0
PyPI
modern-python/lite-bootstrap
Lightweight bootstrap for production-ready Python microservices
MITSep 20, 2026 · metrics 2.10.0
—
qizhoumeng/SQLReport
根据SQL自动生成报表并发送邮件
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · Go
sb0rka/sb0rka
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist · npm
zoonru/rialto
Manage Node resources with PHP
MITSep 15, 2026 · metrics 2.10.0
—
ClickHouse/NuRaft
C++ implementation of Raft core logic as a replication library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
VKCOM/statshouse-go
StatsHouse client library for Go
MPL-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
dasp-rs/dasp-rs
DASP-RS is a crate for digital signal processing, speech processing, music analysis, and phonetics.
MITSep 16, 2026 · metrics 2.10.0