Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,659
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Hex
cozy-elixir/alipay_kit
No repository description published.
No licenseSep 9, 2026 · metrics 2.10.0
npm
cpoile/mattermost-plugin-jira
JIRA plugin for Mattermost 🔌
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
cptpcrd/srtp
A Go implementation of SRTP
MITOct 3, 2026 · metrics 2.10.0
Go
cpuchip/scriptures-mcp
A model context protocol for ai to search, get, and use the scriptures apart of the Church of Jesus Christ of Latter-day Saints
MITSep 26, 2026 · metrics 2.10.0
—
craftsman-li/beego
beego is an open-source, high-performance web framework for the Go programming language.
Custom licenseOct 20, 2026 · metrics 2.10.0
Packagist
craigfrancis/orm
Doctrine Object Relational Mapper (ORM)
MITOct 18, 2026 · metrics 2.10.0
Go
craven-katrine-piers-phrase/gomatic.yze-go-layout
yze analyzer: cross-package three-tier command/domain correspondence
MITSep 12, 2026 · metrics 2.10.0
Go
crenshaw-dev/notifications-engine
Affordable notifications for Kubernetes
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
critiqjo/pulldown-cmark
No repository description published.
MITSep 10, 2026 · metrics 2.10.0
Go
croatiangrn/gocqlx
All-In-One: CQL query builder, ORM and migration tool
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
crobert-1/opentelemetry-collector-contrib
Contrib repository for the OpenTelemetry Collector
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
crypto-com/rust-secp256k1-zkp
Rust language bindings for Bitcoin secp256k1 library; linked against an experimental secp256k1-zkp fork with support for Schnorr signature, MuSig multisignatures etc.
CC0-1.0Sep 23, 2026 · metrics 2.10.0
crates.io
crypto-com/tendermint-rs
No repository description published.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
cryptomental/go-ethereum
Official Go implementation of the Ethereum protocol
LGPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
cryptomeow/lnd
Lightning Network Daemon ⚡️
MITOct 23, 2026 · metrics 2.10.0
Go
cryptopossum/fantom-api-graphql
Fast and secure GraphQL API for aggregated Opera block chain information.
MITSep 20, 2026 · metrics 2.10.0
npm
cryptpad-team/cryptpad
Collaborative office suite, end-to-end encrypted and open-source.
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
Go
cschappert/diff
A library for diffing golang structures
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Maven
cucumber/messages-java
[READ ONLY] Cucumber Messages for Java (Protocol Buffers) - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/messages
MITSep 19, 2026 · metrics 2.10.0
Go
curly-brace-butler/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
PyPI
cxz/splitgraph
Splitgraph command line client and python library
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
cyrille-leclerc/opentelemetry-operator
Kubernetes Operator for OpenTelemetry Collector
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
d2iq-archive/tf-kubernetes-configmap-backend
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
d8vjork/vscode-icons
Icons for Visual Studio Code
MITSep 13, 2026 · metrics 2.10.0
Maven
daisy/epubcheck
Validation tool for EPUB
MITSep 14, 2026 · metrics 2.10.0
crates.io
dancingbug/rsfbclient
Rust Firebird Client
MITOct 19, 2026 · metrics 2.10.0
Maven
danhyun/ratpack
A toolkit for JVM web applications
Custom licenseOct 18, 2026 · metrics 2.10.0
Go
danielmellado/cluster-monitoring-operator
Manage the OpenShift monitoring stack
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
danquack/external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
daodaoliang/maddy
✉️ Composable all-in-one mail server.
GPL-3.0Sep 18, 2026 · metrics 2.10.0