Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,989
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
OpenTTD/py-protocol
OpenTTD's wire protocol as Python library
LGPL-2.1Oct 18, 2026 · metrics 2.10.0
Go
PeerVault/PeerVault-Service
DAEMON of PeerVault p2p secret vault cryptography secure
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
npm
PreMiD/Schemas
📝 Schemas used to validate files.
MPL-2.0Sep 14, 2026 · metrics 2.10.0
npm
QwantResearch/webrtc-swarm
Create a swarm of p2p connections using webrtc and a signalhub
MITOct 18, 2026 · metrics 2.10.0
—
RWS/language-cloud-public-api-samples
No repository description published.
Apache-2.0Oct 9, 2026 · metrics 2.10.0
Go
RainThings/XrayR
No repository description published.
MPL-2.0Sep 10, 2026 · metrics 2.10.0
npm
Sunbird-inQuiry/player
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
—
SwissDataScienceCenter/renku-search
No repository description published.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
TRowbotham/idna
An implementation of UTS#46 Unicode IDNA Compatibility Processing.
MITOct 9, 2026 · metrics 2.10.0
npm · Maven
TapResearch/react-native-tapresearch
A react native plugin for TapResearch
No licenseSep 14, 2026 · metrics 2.10.0
npm
TheThingsNetwork/eslint-config-ttn
Eslint config for use within The Things Network
MITSep 17, 2026 · metrics 2.10.0
—
Tinkerforge/thermal-imaging-bricklet
80x60 pixel thermal imaging camera
No licenseOct 18, 2026 · metrics 2.10.0
npm
Uauy-Lab/biojs-vis-expression-bar
No repository description published.
MITSep 9, 2026 · metrics 2.10.0
Go
Wind-River/ccli
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
—
adbancroft/avr-fast-div
Optimized integer division for AVR hardware
LGPL-2.1Oct 22, 2026 · metrics 2.10.0
crates.io
addr-rs/psl-types
Common types for the public suffix implementation crates
MITOct 20, 2026 · metrics 2.10.0
Go
adobe/thanos
Highly available Prometheus setup with long term storage capabilities.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
aellwein/terraform-provider-universe
A generic Terraform Provider with which you can code dynamic providers in any scripting language.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
—
aergoio/luajit
Modified LuaJIT engine used on Aergo
Custom licenseSep 12, 2026 · metrics 2.10.0
—
agentzh/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
No licenseSep 13, 2026 · metrics 2.10.0
Go
alibabacloud-go/endpoint-util
Alibaba Cloud Endpoint Util for Go
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Packagist
alibabacloud-sdk-php/darabonba-openapi
No repository description published.
No licenseSep 17, 2026 · metrics 2.10.0
PyPI · npm · Maven +2
aliyun/endpoint-util
No repository description published.
No licenseOct 24, 2026 · metrics 2.10.0
PyPI
apify/apify-shared-python
Constants and utilities shared across Apify's Python libraries and projects.
Apache-2.0Oct 12, 2026 · metrics 2.10.0
—
appbaseio/transporter
Sync data between persistence engines, like ETL only not stodgy
BSD-3-ClauseOct 4, 2026 · metrics 2.10.0
RubyGems
arthurschreiber/rugged
ruby bindings to libgit2
MITOct 18, 2026 · metrics 2.10.0
PyPI
ask/sphinx2rst
Convert basic Sphinx format to reStructuredText.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
askalf/deepdive
Local research agent — one command, a cited answer with its trust signals: source-authority mix, lexical citation verification, confidence, cost. CLI + MCP server. Runs on your own LLM router; nightly public report card. Zero hosted dependencies.
MITSep 14, 2026 · metrics 2.10.0
Go
aviate-labs/candid-go
A Candid library for Golang
Apache-2.0Oct 5, 2026 · metrics 2.10.0
Hex
ayrat555/ican
ICAN (International Crypto Account Number). An encoding for asset/crypto addresses
MITSep 29, 2026 · metrics 2.10.0