Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,742
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
KirCute/ftpserverlib-pasvportmap
FtpServerLib with PASV port mapper. This feature allows the PASV command to listen on one port but respond another port, which is useful in environments where there is port mapping in the network.
MITOct 19, 2026 · metrics 2.10.0
Go
KirCute/sftpd-alist
SFTP server library in Go. This fork is dedicated to AList, a file list/WebDAV program that supports multiple storages
MITOct 19, 2026 · metrics 2.10.0
Go
Kiterepo/ikago
IkaGo is a proxy which helps bypassing UDP blocking, UDP QoS and NAT firewall written in Go.
MITSep 25, 2026 · metrics 2.10.0
npm
KoichiKiyokawa/vscode-icons
Icons for Visual Studio Code
MITSep 13, 2026 · metrics 2.10.0
Go
Konstantin35/powkit
Proof of Work hashing algorithms
MITSep 14, 2026 · metrics 2.10.0
crates.io
Kyza/pomsky
A new, portable, regular expression language
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
LTGRP/fsnotify
Cross-platform file system notifications for Go.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go
Lakmal-Fernando/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Go
LebtekOrg/nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
MITSep 19, 2026 · metrics 2.10.0
—
Lemonjay/tippecanoe
Build vector tilesets from large collections of GeoJSON features.
BSD-2-ClauseOct 23, 2026 · metrics 2.10.0
Maven
LifeIsAParadox/Skyblocker
Hypixel Skyblock fabric Mod for 1.21.1
LGPL-3.0Sep 14, 2026 · metrics 2.10.0
npm
LinuxSuRen/console
KubeSphere Console is the web-based UI for KubeSphere clusters.
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Go
LoremIpsum42/prysm
Go implementation of Ethereum proof of stake
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
Ludusamo/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Go
M09Ic/mapcidr
Small utility program to perform multiple operations for a given subnet/CIDR ranges.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
MAECProject/maec5-docs
Documentation for MAEC 5.0
Custom licenseSep 15, 2026 · metrics 2.10.0
—
MLaureB/go-datadog-api
A Go implementation of the Datadog API.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
—
MRZA-MRZA/ethminer
Ethereum miner with OpenCL, CUDA and stratum support
MITSep 11, 2026 · metrics 2.10.0
—
MaTriXy/retool
Vendoring for executables written in Go
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
MacPaw/atlantis
Terraform Pull Request Automation
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
MadVikingGod/opentelemetry-go-contrib
Collection of extensions for OpenTelemetry-Go.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
MahaDAO/arth-core
The world's first valuecoin. Core contracts for $ARTH
GPL-3.0Sep 11, 2026 · metrics 2.10.0
npm · PyPI
MahaDAO/dao-contracts
Vyper contracts to be used by Maha DAO
MITSep 11, 2026 · metrics 2.10.0
Go
MakarovSg/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0
—
MariusVanDerWijden/ethminer
Ethereum miner with OpenCL, CUDA and stratum support
GPL-3.0Sep 11, 2026 · metrics 2.10.0
Go
MartialBE/cronsun
A Distributed, Fault-Tolerant Cron-Style Job System.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
Marwes/json
JSON Serialization for Rust
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
MaskedBelgian/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
MaterializeInc/avro-rs
Avro client library implementation in Rust
MITOct 3, 2026 · metrics 2.10.0
crates.io
MaterializeInc/hashbrown
Rust port of Google's SwissTable hash map
Apache-2.0Sep 20, 2026 · metrics 2.10.0