Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,326
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
jderusse/orm
Doctrine Object Relational Mapper (ORM)
MITOct 19, 2026 · metrics 2.10.0
Go
jdmeyer3/diff
A library for diffing golang structures
MPL-2.0Oct 18, 2026 · metrics 2.10.0
—
jemc/czmq
High-level C binding for ØMQ
MPL-2.0Oct 21, 2026 · metrics 2.10.0
Go
jesse-apollo/graphql
An implementation of GraphQL for Go / Golang
MITOct 19, 2026 · metrics 2.10.0
Go
jgautheron/pulumi-signoz
Pulumi provider for SigNoz, bridged from SigNoz/terraform-provider-signoz
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
jimklimov/czmq
High-level C binding for ØMQ
MPL-2.0Oct 21, 2026 · metrics 2.10.0
RubyGems
jleonardw9/grouped_validations
Validation groups for ActiveRecord
MITOct 17, 2026 · metrics 2.10.0
Go
joemiller/melange
build APKs from source code
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
jonspring/tidytuesday
Official repo for the #tidytuesday project
MITOct 22, 2026 · metrics 2.10.0
Go
josketres/gosoline
Gosoline is our framework which fuels all of our Golang applications
No licenseOct 21, 2026 · metrics 2.10.0
Go · npm
jspdown/traefik-playground
A web-based development environment for experimenting with Traefik configurations
MITOct 22, 2026 · metrics 2.10.0
Go
justIrina/gosoline
Gosoline is our framework which fuels all of our Golang applications
No licenseOct 21, 2026 · metrics 2.10.0
Go
kadinsayani/go-dqlite
Go bindings for libdqlite
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
kaptinlin/jsonmerge
Lightweight RFC 7386 compliant Go library for JSON Merge Patch across structs, maps, and multiple document formats
MITOct 23, 2026 · metrics 2.10.0
Go
kaptinlin/orderedobject
Go library for ordered key-value objects with type safety, JSON support, and map conversion
MITOct 21, 2026 · metrics 2.10.0
Go
karan-batavia/gjson
Get JSON values quickly - JSON parser for Go
MITOct 20, 2026 · metrics 2.10.0
crates.io · PyPI
keep-starknet-strange/cairo-vm
cairo-rs is a Rust implementation of the Cairo VM. Cairo (CPU Algebraic Intermediate Representation) is a programming language for writing provable programs, where one party can prove to another that a certain computation was executed correctly. Cairo and similar proof systems can be used to provide scalability to blockchains.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
kevinburke/justrun
A tool that watches files, and runs possibly long-lived commands when they change.
MITOct 21, 2026 · metrics 2.10.0
Go
keystroke3/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Go
khulnasoft/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
kimhemsoe/orm
Doctrine Object Relational Mapper (ORM)
MITOct 19, 2026 · metrics 2.10.0
—
knkski/burrow
Hyperledger Burrow
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
koenpunt/imgproxy
Fast and secure standalone server for resizing and converting remote images
MITOct 18, 2026 · metrics 2.10.0
RubyGems
komagata/stripe-i18n
I18n translations for Stripe error codes
MITOct 22, 2026 · metrics 2.10.0
Go
l0k18/9
No repository description published.
Custom licenseOct 20, 2026 · metrics 2.10.0
Go · npm
lantosgyuri/gosoline
Gosoline is our framework which fuels all of our Golang applications
MITOct 21, 2026 · metrics 2.10.0
Packagist
laravel-shift/laravel-trailing-slash
Adds redirection with trailing slash in Laravel.
MITOct 22, 2026 · metrics 2.10.0
Go
leki75/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Go · npm
lens077/config-center
Archived — superseded by lens077/control-tower (services/config). Go SDK frozen at v0.1.0.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
librucha/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0