Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,560
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
NuGet
Servarr/FFMpegCore
A .NET FFMpeg/FFProbe wrapper for easily integrating media analysis and conversion into your C# applications
MITJul 26, 2026 · metrics 2.10.0
Go
ShannonDing/rocketmq-client-go
Apache RocketMQ go client
Apache-2.0Jul 26, 2026 · metrics 2.10.0
RubyGems
Shopify/spring
Rails application preloader
MITAug 19, 2026 · metrics 2.10.0
—
SteveBronder/math
The Stan Math Library is a C++ template library for automatic differentiation of any order using forward, reverse, and mixed modes. It includes a range of built-in functions for probabilistic modeling, linear algebra, and equation solving.
BSD-3-ClauseJul 26, 2026 · metrics 2.10.0
Go
SteveLasker/oras
OCI Registry As Storage
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
Sunbird-inQuiry/editor
No repository description published.
MITJul 19, 2026 · metrics 2.10.0
NuGet
Youssef1313/Combinatorial.MSTest
Adds combinatorial testing capability to MSTest tests
Custom licenseSep 3, 2026 · metrics 2.10.0
Go
YujiSuzuki/ai-sandbox-dkmcp
Secure AI sandbox for Claude Code / Gemini — hide secrets, enable cross-container access
MITAug 14, 2026 · metrics 2.10.0
Go
ZanzyTHEbar/errbuilder-go
No repository description published.
MITAug 23, 2026 · metrics 2.10.0
—
adeelejaz/html5-boilerplate
Professional front-end template. So much goodness baked in by default
No licenseJul 23, 2026 · metrics 2.10.0
Go
adobe/external-dns
Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
aeneasr/gjson
Get JSON values quickly - JSON parser for Go
MITAug 25, 2026 · metrics 2.10.0
PyPI
alalazo/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Custom licenseJul 26, 2026 · metrics 2.10.0
Go
alchemyplatform/go-ethereum
Official Go implementation of the Ethereum protocol
LGPL-3.0Jul 25, 2026 · metrics 2.10.0
PyPI
alexcarney96/TerrorDashboard
Builds a dashboard from the START GTD terrorism dataset.
MITAug 22, 2026 · metrics 2.10.0
PyPI
alteralt/aio_crystal_pay
No repository description published.
No licenseJul 17, 2026 · metrics 2.10.0
—
andrewle/html5-boilerplate
starting html/css template. so much goodness baked in by default
No licenseJul 23, 2026 · metrics 2.10.0
npm
anduintransaction/raven
Fake mail server
MITJul 17, 2026 · metrics 2.10.0
Go
arajkumar/cluster-monitoring-operator
Manage the OpenShift monitoring stack
Apache-2.0Jul 24, 2026 · metrics 2.10.0
npm
b12io/metronome
No repository description published.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
—
balchjd/html5-boilerplate
starting html/css template. so much goodness baked in by default
No licenseJul 23, 2026 · metrics 2.10.0
—
baresip/retest
Testprogram for libre and librem (merged to libre)
No licenseAug 1, 2026 · metrics 2.10.0
Go
beyondstorage/go-service-qingstor
QingStor Object Storage support for go-storage.
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go
binary-manu/pkgproxy
A caching proxy server specifically designed for caching Arch GNU/Linux packages for pacman
GPL-3.0Aug 24, 2026 · metrics 2.10.0
PyPI
biotite-dev/biotraj
Reading structures from trajectory files.
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
Go
blackwell-systems/gcp-iam-control-plane
Control plane for local GCP emulators. Single policy file drives IAM enforcement across Secret Manager, KMS, and more. Test production authorization behavior without GCP credentials.
Custom licenseSep 7, 2026 · metrics 2.10.0
PyPI
brettcannon/importlib
Packaging for importlib from Python 2.7 for the Cheeseshop/PyPI
Custom licenseAug 8, 2026 · metrics 2.10.0
—
burmilla/cli-1
A simple, fast, and fun package for building command line apps in Go
MITJul 23, 2026 · metrics 2.10.0
—
camuso/kabitools
Parse .i files for symbols that must be kabi protected
No licenseAug 19, 2026 · metrics 2.10.0
Go
cdvelop/assetmin
A lightweight and efficient web asset packager and minifier for Go applications
MITSep 5, 2026 · metrics 2.10.0