Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,080
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
betrace-hq/compliance-as-code
A collection of patterns for treating compliance evidence as observable telemetry.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
bigeasy/delta
URL routing for the browser and Node.js.
MITSep 20, 2026 · metrics 2.10.0
Go
bitrockteam/caravan-cli
Caravan's CLI
MPL-2.0Oct 18, 2026 · metrics 2.10.0
npm
blackravenx/captcha-libs
CaptchaLibs - Simplified Monorepo for Node.js Captcha Recognition APIs
No licenseOct 12, 2026 · metrics 2.10.0
—
bower-media-samples/big-buck-bunny-1080p-30s
30 first seconds of Big Buck Bunny (1080p)
No licenseSep 20, 2026 · metrics 2.10.0
PyPI
bretello/fancycompleter
Colorful Python tab completion - fork of https://github.com/pdbpp/fancycompleter
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
PyPI
brinkmanlab/BioPython-Convert
Tool to interconvert between various bioinformatics formats that BioPython supports
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
bufbuild/connect-go
Moved to https://github.com/connectrpc/connect-go
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
bugout-dev/brood
Instantly add authentication, teams, and payments to your frontend, API, or serverless application.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
buildinternet/releases-cli
Agent-friendly CLI for searching the Release Index catalog of release notes, changelogs, and product announcements
MITOct 22, 2026 · metrics 2.10.0
—
chiefbiiko/base64
base64 strings from/to Uint8Arrays
MITSep 23, 2026 · metrics 2.10.0
Go
clipperhouse/stringish
Handle strings and bytes interchangeably in Go
MITOct 20, 2026 · metrics 2.10.0
PyPI
cmorisse/ikp3db
IKPdb for CPython 3.x
MITSep 9, 2026 · metrics 2.10.0
Go · npm
commitdev/zero-backend-go
A zero module containing a backend that can be deployed to the infrastructure set up using zero-aws-eks-stack
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
cosmos/btcutil
Provides bitcoin-specific convenience functions and types
ISCSep 23, 2026 · metrics 2.10.0
Go
costela/golpa
Go library for modeling and solving linear programming problems
GPL-3.0Oct 6, 2026 · metrics 2.10.0
—
cwru-rcci/dug
dug is a utility similar to du that focuses on summarizing usage by group or owner
MITOct 23, 2026 · metrics 2.10.0
—
d2iq-archive/kubeaddons-enterprise
Enterprise Addon Repository
No licenseSep 20, 2026 · metrics 2.10.0
npm
dabapps/roe
DabApps' Project Development Kit
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
databricks/m3
M3 monorepo - Distributed TSDB, Aggregator and Query Engine, Prometheus Sidecar, Graphite Compatible, Metrics Platform
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
deskpro/react-datepicker-hijri
A simple and reusable datepicker component for React
MITSep 18, 2026 · metrics 2.10.0
Go
dfinity/terraform-provider-ic
A Terraform provider for provisioning Internet Computer canisters
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
dymensionxyz/osmosis
The AMM Laboratory
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
ecnepsnai/ds
A key-value store with hash indexes
MITSep 13, 2026 · metrics 2.10.0
—
ejoy/kcp-go
A Production-Grade Reliable-UDP Library for golang
MITOct 19, 2026 · metrics 2.10.0
PyPI
elemental-lf/k8s-crd-resolver
Resolves JSON references ($ref) in Kubernetes custom resource definitions
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
emqx/cuttlefish
never lose your childlike sense of wonder baby cuttlefish, promise me?
No licenseSep 11, 2026 · metrics 2.10.0
RubyGems
envygeeks/forwardable-extended
:muscle: Extends forwardable with delegation to hashes and instance variables.
MITSep 10, 2026 · metrics 2.10.0
—
evalplus/humanevalplus_release
Release repository for HumanEval+ data
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
grantila/list-open-files
lsof for Node.js
MITOct 23, 2026 · metrics 2.10.0