Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,660
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
franmomu/orm
Doctrine Object Relational Mapper (ORM)
MITOct 18, 2026 · metrics 2.10.0
Hex
freshaengineering/grpc
[gRPC] Elixir gRPC implementation (Fresha fork) - Unary/streaming RPC, TLS, interceptors, compression, connection backoff. | Elixir | protobuf-elixir
Apache-2.0Sep 9, 2026 · metrics 2.10.0
—
frezbo/advanced-ssh-config
:computer: make your ssh client smarter
MITSep 13, 2026 · metrics 2.10.0
npm · Packagist
froala/wysiwyg-editor-release
Froala wysiwyg editor release
Custom licenseSep 10, 2026 · metrics 2.10.0
—
frostyslav/metallb
A network load-balancer implementation for Kubernetes using standard routing protocols
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
fsyyft-go/monorepo
Go 使用 monorepo（单体仓库）的模式的示例
MITSep 18, 2026 · metrics 2.10.0
Go
fufuok/gjson
Get JSON values quickly - JSON parser for Go
MITOct 23, 2026 · metrics 2.10.0
Go
fujiwara/lambda-extensions
lambda-extention-client is a client for Lambda Extensions API
MITSep 19, 2026 · metrics 2.10.0
Go
fujiwara/ssmwrap
Exec command with environment variables loaded from AWS SSM.
MITOct 20, 2026 · metrics 2.10.0
Go
futureq-io/protocol
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
Go
futureq-io/sdk
No repository description published.
MITOct 19, 2026 · metrics 2.10.0
Go
fzipi/coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
g-easy/opencensus-go
(this is a fork just to send PRs, please follow the upstream repo instead)
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
gab-satchi/eventing
Open source specification and implementation of Knative event binding and delivery
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist · npm
gabrielesbaiz/nova-card-html
A Laravel Nova card that displays any html content.
MITSep 24, 2026 · metrics 2.10.0
Packagist
gabrielesbaiz/unsplash-toolkit
A lightweight helper package to handle Unsplash photos
MITSep 27, 2026 · metrics 2.10.0
Go
gagin/make-lite
I was so frustrated by Make not working for its most obvious use case, I had to make my own.
MITSep 20, 2026 · metrics 2.10.0
Go
ganehag/xbm2gdshader
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
gaspardpetit/mcp-shell
A MCP server providing local docker-contained access to an AI agent
MITSep 19, 2026 · metrics 2.10.0
Go
gbbirkisson/go-rpio
:electric_plug: Raspberry Pi GPIO library for go-lang
MITOct 19, 2026 · metrics 2.10.0
—
gdzy1987/event
Go实现的轻量级的事件管理、调度程序库, 支持设置监听器的优先级, 支持根据事件名称来进行一组事件的监听. Lightweight event manager and dispatcher implements by Go
MITSep 19, 2026 · metrics 2.10.0
—
gebner/lean
Lean Theorem Prover
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
geerew/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0
npm
gemini-testing/sql.js
SQLite compiled to JavaScript through Emscripten
Custom licenseSep 9, 2026 · metrics 2.10.0
npm
genome-nexus/genome-nexus-cli
💻 Command line interface for Genome Nexus 🧬
No licenseOct 18, 2026 · metrics 2.10.0
npm
george-hm/vscode-icons
Icons for Visual Studio Code
MITSep 13, 2026 · metrics 2.10.0
Packagist
georgringer/mask
TYPO3 Extension Mask
GPL-2.0Sep 19, 2026 · metrics 2.10.0
Go
geritol/diff
A library for diffing golang structures
MPL-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
gerritholl/satpy
Python package for earth-observing satellite data processing
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
getarcaneapp/updater
https://github.com/getarcaneapp/ki
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0