Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,175
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
SiavashBeheshti/devops-toolkit
🛠️ A powerful CLI toolkit for DevOps engineers. Beautiful terminal output for Kubernetes, Docker, GitLab CI/CD, and compliance checks. Better than native tools.
MITSep 19, 2026 · metrics 2.10.0
Go
SixK/micromdm
Mobile Device Management server
MITSep 18, 2026 · metrics 2.10.0
PyPI
Spatial-NVR/wyze-plugin
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
—
StevenMaude/sequence
Sequence is a frontend for Webdriver testing. It's goal is to make writing and managing frontend tests easier in Go.
MITSep 19, 2026 · metrics 2.10.0
Go
Stromweld/packer-plugin-vmware
Packer plugin for VMware Builder
MPL-2.0Sep 18, 2026 · metrics 2.10.0
Go
Techloopio/extractor_tool
Install GO (it’s cool) and use this script to extract data from any of your local GIT project. The Extractor is a tool that calculates the score from your local repository. Extractor output is partly hashed JSON file based on your commits history.
MITSep 19, 2026 · metrics 2.10.0
Go
TenkiCloud/tenki-sdk-go
DEPRECATED - Please use https://github.com/LuxorLabs/tenki-sdk-go
MITSep 16, 2026 · metrics 2.10.0
RubyGems
TheDen/agent
The Buildkite Agent is an open-source toolkit written in Golang for securely running build jobs on any device or network
MITSep 17, 2026 · metrics 2.10.0
Packagist
TomasVotruba/rector-src
Development repository for Rector
MITSep 20, 2026 · metrics 2.10.0
—
Twenga/aawql
Advanced AdWords Query Language (AWQL)
No licenseSep 19, 2026 · metrics 2.10.0
—
UnofficialJuliaMirror/GenericSchur.jl-c145ed77-6b09-5dd9-b285-bf645a82121e
Last mirrored from https://github.com/RalphAS/GenericSchur.jl.git on 2019-11-18T21:58:11.786-05:00 by @UnofficialJuliaMirrorBot via Travis job 481.13 , triggered by Travis cron job on branch "master"
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
Voskan/arena-cache
GC‑free, high‑throughput in‑process cache for Go 1.24, powered by the new `arena` allocator
MITSep 18, 2026 · metrics 2.10.0
—
VostroNet/lego
Let's Encrypt client and ACME library written in Go
MITSep 15, 2026 · metrics 2.10.0
—
Webstrates/golem-herder
Control your golems, goddamnit.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
WojciechMazur/gazelle_cc
Public repository for the Gazelle C++ extension
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
X2OX/bencode
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
YouSysAdmin/totp
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
Go
ZergsLaw/net
[mirror] Go supplementary network libraries
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
crates.io
a-happin/zabbrev
zsh abbreviation expansion plugin
MITSep 18, 2026 · metrics 2.10.0
—
aaronlehmann/logrus
Structured, pluggable logging for Go.
MITSep 19, 2026 · metrics 2.10.0
Go
aarti/braintree-go
A Go client library for Braintree
No licenseSep 21, 2026 · metrics 2.10.0
Go
abgoyal/get_gh_release
tiny cli utility to download latest release from a github private repo given a github token
No licenseSep 19, 2026 · metrics 2.10.0
npm
absolutejs/vulnerabilities-osv
Archived: moved to the vulnerabilities-adapters monorepo (osv/ workspace)
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
absolutejs/vulnerabilities-postgres
Archived: moved to the vulnerabilities-adapters monorepo (postgres/ workspace)
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
ackintosh/sqldef
Idempotent MySQL/PostgreSQL schema management by SQL
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
adamcox/waflyctl
Fastly WAF CLI
MITSep 19, 2026 · metrics 2.10.0
—
adamiwaniuk/sumologic-otel-collector
SumoLogic Distro for OpenTelemetry Collector
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
adamwasila/sup
Super simple deployment tool - think of it like 'make' for a network of servers
MITSep 19, 2026 · metrics 2.10.0
Go
adapap/depth
Visualize Go Dependency Trees
MITSep 17, 2026 · metrics 2.10.0
—
agazso/swarm
Swarm: Censorship resistant storage and communication infrastructure for a truly sovereign digital society
LGPL-3.0Sep 17, 2026 · metrics 2.10.0