Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,013
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
Tinkerforge/thermal-imaging-bricklet
80x60 pixel thermal imaging camera
No licenseOct 18, 2026 · metrics 2.10.0
npm
Uauy-Lab/biojs-vis-expression-bar
No repository description published.
MITSep 9, 2026 · metrics 2.10.0
Go
Wind-River/ccli
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
—
adbancroft/avr-fast-div
Optimized integer division for AVR hardware
LGPL-2.1Oct 22, 2026 · metrics 2.10.0
crates.io
addr-rs/psl-types
Common types for the public suffix implementation crates
MITOct 20, 2026 · metrics 2.10.0
Go
adobe/thanos
Highly available Prometheus setup with long term storage capabilities.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
aellwein/terraform-provider-universe
A generic Terraform Provider with which you can code dynamic providers in any scripting language.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
—
aergoio/luajit
Modified LuaJIT engine used on Aergo
Custom licenseSep 12, 2026 · metrics 2.10.0
—
agentzh/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
No licenseSep 13, 2026 · metrics 2.10.0
Go
alibabacloud-go/endpoint-util
Alibaba Cloud Endpoint Util for Go
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Packagist
alibabacloud-sdk-php/darabonba-openapi
No repository description published.
No licenseSep 17, 2026 · metrics 2.10.0
PyPI · npm · Maven +2
aliyun/endpoint-util
No repository description published.
No licenseOct 24, 2026 · metrics 2.10.0
PyPI
apify/apify-shared-python
Constants and utilities shared across Apify's Python libraries and projects.
Apache-2.0Oct 12, 2026 · metrics 2.10.0
—
appbaseio/transporter
Sync data between persistence engines, like ETL only not stodgy
BSD-3-ClauseOct 4, 2026 · metrics 2.10.0
RubyGems
arthurschreiber/rugged
ruby bindings to libgit2
MITOct 18, 2026 · metrics 2.10.0
PyPI
ask/sphinx2rst
Convert basic Sphinx format to reStructuredText.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
askalf/deepdive
Local research agent — one command, a cited answer with its trust signals: source-authority mix, lexical citation verification, confidence, cost. CLI + MCP server. Runs on your own LLM router; nightly public report card. Zero hosted dependencies.
MITSep 14, 2026 · metrics 2.10.0
Go
aviate-labs/candid-go
A Candid library for Golang
Apache-2.0Oct 5, 2026 · metrics 2.10.0
Hex
ayrat555/ican
ICAN (International Crypto Account Number). An encoding for asset/crypto addresses
MITSep 29, 2026 · metrics 2.10.0
RubyGems
azzimoda/raspishika
Telegram-бот для удобного расписания МПК ТИУ.
MITSep 18, 2026 · metrics 2.10.0
—
bachya/advanced-ssh-config
:computer: assh: ssh wrapper using ProxyCommand that adds regex, aliases, gateways, includes, dynamic hostnames to SSH and ssh-config
MITSep 13, 2026 · metrics 2.10.0
Go
bakito/gws
Google Cloud Workstation CLI
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist · npm
barrelstrength/sprout
Sprout Marketing Suite modules for Craft CMS applications
Custom licenseSep 13, 2026 · metrics 2.10.0
PyPI
bdraco/chacha20poly1305-reuseable
A reusable version of ChaCha20Poly1305 for use with cryptography and asyncio
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
benediktrauscher/biojs-human-tissues
Simple visualisation of human tissues
MITSep 9, 2026 · metrics 2.10.0
Go
beyondstorage/go-service-oss
Aliyun Object Storage Service (OSS) support for go-storage
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
biojs-io/biojs-io-parser
A generic BioJS parser
No licenseSep 9, 2026 · metrics 2.10.0
RubyGems
blowmage/minitest-rails
Minitest integration for Rails
MITSep 14, 2026 · metrics 2.10.0
Go
bosonicalcom/geck
Geck is the toolkit for cloud-native enterprise systems written in Go.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
canfoundation/cif-js
No repository description published.
MITOct 22, 2026 · metrics 2.10.0