Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,078
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist · npm
acquia/cohesion-theme
Acquia Cohesion minimal theme. A Cohesion enabled kickstarter theme for use within Cohesion projects.
No licenseOct 20, 2026 · metrics 2.10.0
PyPI
alexlarsson/docker
Docker - the open-source application container engine
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
alibaba-archive/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Apache-2.0Sep 12, 2026 · metrics 2.10.0
crates.io
anoma/smooth-operator
Rust checked arithmetic without the visual clutter
MITOct 12, 2026 · metrics 2.10.0
—
arilamstein/choroplethrCaCensusTract
Shapefile, metadata and visualization functions for US Census Tracts in California
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
astroport-fi/terra-plus
Production Quality contracts under open source licenses
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
RubyGems
aycabta/vterm-gem
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
Hex
ayrat555/ex_pbkdf2
Password-Based Key Derivation Function v2 (PBKDF2) for Elixir by a Rust-based NIF
MITSep 9, 2026 · metrics 2.10.0
npm · crates.io
baekenough/oh-my-customcodex
Codex-native port of oh-my-customcode
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
bahlo/generic-list-go
Go container/list but with generics.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Packagist
barryvdh/laravel
A PHP Framework For Web Artisans
No licenseSep 19, 2026 · metrics 2.10.0
Hex · crates.io
benodiwal/bubblegum_nifs
Elixir interface for Metaplex Bubblegum compressed NFTs on Solana. This library provides functions to create, mint, and transfer compressed NFTs using the Metaplex Bubblegum program.
MITSep 14, 2026 · metrics 2.10.0
—
betrace-hq/compliance-as-code
A collection of patterns for treating compliance evidence as observable telemetry.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
bigeasy/delta
URL routing for the browser and Node.js.
MITSep 20, 2026 · metrics 2.10.0
Go
bitrockteam/caravan-cli
Caravan's CLI
MPL-2.0Oct 18, 2026 · metrics 2.10.0
npm
blackravenx/captcha-libs
CaptchaLibs - Simplified Monorepo for Node.js Captcha Recognition APIs
No licenseOct 12, 2026 · metrics 2.10.0
—
bower-media-samples/big-buck-bunny-1080p-30s
30 first seconds of Big Buck Bunny (1080p)
No licenseSep 20, 2026 · metrics 2.10.0
PyPI
bretello/fancycompleter
Colorful Python tab completion - fork of https://github.com/pdbpp/fancycompleter
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
PyPI
brinkmanlab/BioPython-Convert
Tool to interconvert between various bioinformatics formats that BioPython supports
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
bufbuild/connect-go
Moved to https://github.com/connectrpc/connect-go
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
bugout-dev/brood
Instantly add authentication, teams, and payments to your frontend, API, or serverless application.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
buildinternet/releases-cli
Agent-friendly CLI for searching the Release Index catalog of release notes, changelogs, and product announcements
MITOct 22, 2026 · metrics 2.10.0
—
chiefbiiko/base64
base64 strings from/to Uint8Arrays
MITSep 23, 2026 · metrics 2.10.0
Go
clipperhouse/stringish
Handle strings and bytes interchangeably in Go
MITOct 20, 2026 · metrics 2.10.0
PyPI
cmorisse/ikp3db
IKPdb for CPython 3.x
MITSep 9, 2026 · metrics 2.10.0
Go · npm
commitdev/zero-backend-go
A zero module containing a backend that can be deployed to the infrastructure set up using zero-aws-eks-stack
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
cosmos/btcutil
Provides bitcoin-specific convenience functions and types
ISCSep 23, 2026 · metrics 2.10.0
Go
costela/golpa
Go library for modeling and solving linear programming problems
GPL-3.0Oct 6, 2026 · metrics 2.10.0
—
cwru-rcci/dug
dug is a utility similar to du that focuses on summarizing usage by group or owner
MITOct 23, 2026 · metrics 2.10.0
—
d2iq-archive/kubeaddons-enterprise
Enterprise Addon Repository
No licenseSep 20, 2026 · metrics 2.10.0