Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,627
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
cucumber/messages-java
[READ ONLY] Cucumber Messages for Java (Protocol Buffers) - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/messages
MITSep 19, 2026 · metrics 2.10.0
Go
curly-brace-butler/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
PyPI
cxz/splitgraph
Splitgraph command line client and python library
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
cyrille-leclerc/opentelemetry-operator
Kubernetes Operator for OpenTelemetry Collector
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
d2iq-archive/tf-kubernetes-configmap-backend
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
d8vjork/vscode-icons
Icons for Visual Studio Code
MITSep 13, 2026 · metrics 2.10.0
Maven
daisy/epubcheck
Validation tool for EPUB
MITSep 14, 2026 · metrics 2.10.0
crates.io
dancingbug/rsfbclient
Rust Firebird Client
MITOct 19, 2026 · metrics 2.10.0
Maven
danhyun/ratpack
A toolkit for JVM web applications
Custom licenseOct 18, 2026 · metrics 2.10.0
Go
danielmellado/cluster-monitoring-operator
Manage the OpenShift monitoring stack
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
danquack/external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
daodaoliang/maddy
✉️ Composable all-in-one mail server.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
daosvik/uint256
Fixed size 256-bit math library
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
—
daramos/gphotos-uploader-cli
Command line tool to mass upload media folders to your google photos account(s) (Mac OS / Linux)
No licenseSep 11, 2026 · metrics 2.10.0
Go
darashenka/gocloak
golang keycloak client
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
darkowlzz/csi-lib-utils
Common code for Kubernetes CSI sidecar containers (e.g. `external-attacher`, `external-provisioner`, etc.)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
darkowlzz/notification-controller
The GitOps Toolkit event forwarded and notification dispatcher
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
dataengineeringformachinelearning/dataengineeringformachinelearning
Data Engineering for Machine Learning — Data, AI, ML, and Cybersecurity community
Apache-2.0Sep 12, 2026 · metrics 2.10.0
crates.io
datafuse-extras/bincode
A binary encoder / decoder implementation in Rust.
MITSep 20, 2026 · metrics 2.10.0
crates.io
datafuse-extras/csv-async
CSV parsing in async context
MITSep 20, 2026 · metrics 2.10.0
—
dataops-sre/kafka-kit
Kafka data mapping and recovery tools
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
dave-tucker/aya
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
davel/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0
npm
david-driscoll/omnisharp-vscode
Official C# support for Visual Studio Code (powered by OmniSharp)
MITSep 13, 2026 · metrics 2.10.0
Go
davidkarlsen/opentelemetry-operator
Kubernetes Operator for OpenTelemetry Collector
Apache-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
davidpdrsn/maud
:pencil: Compile-time HTML templates for Rust
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
davidzech27/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
Go
daxartio/anygo
Rust-like error handling in Go
MITSep 19, 2026 · metrics 2.10.0
—
dbadura/cli
Simple set of commands to manage a Kyma installation
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
dbhq/discordgo
(Golang) Go bindings for Discord
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0