Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,849
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
franciscolourenco/html5-boilerplate
starting html/css template. so much goodness baked in by default
No licenseSep 13, 2026 · metrics 2.10.0
Go
g11tech/mergemock
Merge Mock - testing tool for the Ethereum Merge
MITSep 14, 2026 · metrics 2.10.0
Packagist
gabrielesbaiz/whatsapp-toolkit
A helper package to handle WhatsApp messages using api.whatsapp.com
MITSep 27, 2026 · metrics 2.10.0
PyPI
garyvdm/dbus-ezy
Fork of dbus-next in the early phase of develoment.
MITOct 23, 2026 · metrics 2.10.0
RubyGems
geemus/netrc
Reads and writes netrc files.
MITOct 23, 2026 · metrics 2.10.0
crates.io
geldata/graphql-parser
A graphql-parser fork that has customizations needed for EdgeDB
Apache-2.0Sep 25, 2026 · metrics 2.10.0
—
gertingold/caps
The Casimir Effect in the plane-sphere geometry.
GPL-2.0Oct 19, 2026 · metrics 2.10.0
—
getgauge/template-java
No repository description published.
CC0-1.0Sep 18, 2026 · metrics 2.10.0
PyPI
ghiggi/satpy
Python package for earth-observing satellite data processing
GPL-3.0Sep 13, 2026 · metrics 2.10.0
—
ghostery/github-release
Commandline app to create and edit releases on Github (and upload artifacts)
MITOct 9, 2026 · metrics 2.10.0
Go
giantswarm/klaus-operator
Kubernetes operator for dynamic Klaus instance management
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm · Packagist
gkatsev/video.js
Universal video embed.
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
glycerine/shiny
Multiplatform Go UI and Window Rendering library
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
crates.io
gnosis/gp-gas-estimation
No repository description published.
Custom licenseSep 25, 2026 · metrics 2.10.0
—
gravitational/libbpf
Automated upstream mirror for libbpf stand-alone build
Custom licenseOct 3, 2026 · metrics 2.10.0
Go
guardian/nest-secrets
Easily get secrets from parameter store.
No licenseSep 10, 2026 · metrics 2.10.0
—
gzachos/compilers-course-uoi
CiScal Compiler developed for the Compilers course @cse.uoi.gr
GPL-2.0Oct 20, 2026 · metrics 2.10.0
Hex
h3poteto/opentelemetry_phoenixchannel
Telemetry handler that creates Opentelemetry spans for Phoenix.Channels events
MITSep 9, 2026 · metrics 2.10.0
npm
hansl/simple-cbor
Encode and decode CBOR documents, with compatibility and control for all subtypes
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
harborclient/sdk
TypeScript definitions for HarborClient plugin development
No licenseSep 12, 2026 · metrics 2.10.0
npm
hed-hog/cli
No repository description published.
No licenseSep 13, 2026 · metrics 2.10.0
PyPI
hintjens/czmq
High-level C binding for ØMQ
MPL-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
hodoulp/OpenColorIO
A color management framework for visual effects and animation.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Go · npm · Packagist +1
holmesian/hik_ws_client
海康威视的 Web 视频流两层 WebSocket 协议
No licenseOct 4, 2026 · metrics 2.10.0
Go
hongker/go-datastructures
A collection of useful, performant, and threadsafe Go datastructures.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems
honzasterba/memoist
ActiveSupport::Memoizable with a few enhancements
MITSep 11, 2026 · metrics 2.10.0
Go
houseme/wechat
WeChat SDK for Go （微信SDK：简单、易用）
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
human2312/go-mitmproxy
mitmproxy implemented with golang. 用 Golang 实现的中间人攻击（Man-in-the-middle），解析、监测、篡改 HTTP/HTTPS 流量。
MITSep 20, 2026 · metrics 2.10.0
npm · crates.io
i-VRESSE/pdbtbx-ts
JS wrapper around pdbtbx rust crate
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
iGLOO-be/geopostcodes-sequelize-import
Import geopostcodes.com CSV into SQL databases with Sequelize.js
Custom licenseSep 14, 2026 · metrics 2.10.0