Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,508
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
merscwog/ratpack
A toolkit for JVM web applications
Custom licenseOct 23, 2026 · metrics 2.10.0
—
metalmatze/cluster-monitoring-operator
Manage the OpenShift monitoring stack
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
metcoder95/undici
An HTTP/1.1 client, written from scratch for Node.js
MITSep 13, 2026 · metrics 2.10.0
PyPI
meteoswiss-mdr/satpy
Python for weather satellite data
GPL-3.0Sep 13, 2026 · metrics 2.10.0
npm
metrue/swagger-stats
API Observability
MITSep 20, 2026 · metrics 2.10.0
crates.io
mewisme/mew-language
A cat-themed programming language with a runtime written in Rust
GPL-3.0Oct 19, 2026 · metrics 2.10.0
—
mfalkvidd/json2csv
Convert JSON to CSV (go package and command line tool)
MITOct 18, 2026 · metrics 2.10.0
—
micahcoffman/vim-go
Go development plugin for Vim
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
mickamy/mapgen
Type-safe struct mapping code generator for Go, driven by registered converters and go generate
MITSep 19, 2026 · metrics 2.10.0
Go
mihai-chiorean/stats
Go package for abstracting stats collection
MITSep 18, 2026 · metrics 2.10.0
Go
mihaitodor/diff
A library for diffing golang structures
MPL-2.0Oct 18, 2026 · metrics 2.10.0
—
mikealmond/html5-boilerplate
A professional front-end template for building fast, robust, and adaptable web apps or sites.
MITSep 13, 2026 · metrics 2.10.0
Go
miku/rclone
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Wasabi, Google Cloud Storage, Yandex Files
MITOct 19, 2026 · metrics 2.10.0
Go
milas/compose
Define and run multi-container applications with Docker
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
milkpirate/assh
:computer: make your ssh client smarter
MITSep 13, 2026 · metrics 2.10.0
Packagist
mimmi20/monolog-callbackfilterhandler
Monolog handler wrapper that filters records based on a list of callback functions
Custom licenseSep 11, 2026 · metrics 2.10.0
Go · npm
mind-vm/sqlb
Schema-first data layer for Go and Postgres: composable typed queries, a validated REST filter grammar, and domain hooks.
MITOct 6, 2026 · metrics 2.10.0
npm · Packagist
mirazmamun/hydra
OAuth2 server with OpenID Connect - cloud native, security-first, open source API security for your infrastructure. Written in Go. SDKs for any language.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
mirkobrombin/go-module-router
A lightweight, zero-codegen library that lets you compose **modular HTTP applications** in Go. Define repositories, services, middleware and routes in plain Go code and have them autowired at start-up—no reflection on the hot path, no generated files to commit.
MITSep 11, 2026 · metrics 2.10.0
—
mitchcapper/diffutils
unofficial mirror of https://git.savannah.gnu.org/git/diffutils.git
GPL-3.0Oct 20, 2026 · metrics 2.10.0
Go
mitghi/gosoline
Gosoline is our framework which fuels all of our Golang applications
No licenseOct 21, 2026 · metrics 2.10.0
—
mithro/litex-buildenv
An environment for building LiteX based FPGA designs. Makes it easy to get everything you need!
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
PyPI
mitkin/satpy
Python package for earth-observing satellite data processing
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
mkumatag/go-sdk-core
The go-sdk-core repository contains core functionality required by Go code generated by the IBM OpenAPI SDK Generator.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
mleonidas/diff
A library for diffing golang structures
MPL-2.0Oct 18, 2026 · metrics 2.10.0
npm
mljs/nGMCA
A tool for Non-negative matrix factorization
MITOct 22, 2026 · metrics 2.10.0
Go
mmanciop/opentelemetry-operator
Kubernetes Operator for OpenTelemetry Collector
Apache-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
mobilecoinofficial/diesel
A safe, extensible ORM and Query Builder for Rust
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
mobilecoinofficial/opentelemetry-rust
OpenTelemetry API and SDK for Rust
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
mobreza/static-file-server
Tiny, simple static file server using environment variables for configuration
MITSep 19, 2026 · metrics 2.10.0