Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,264
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
williamokano/hashicorp-plugin-example
Simple go project completely written using AI in a vibecoding vibes. It's a test case
No licenseSep 19, 2026 · metrics 2.10.0
Go · npm
wiltonlazary/grafana
The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
winey-dev/go-cache
go getter cache
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Hex
wojtekmach/earmark_ast_dsl
A tool to generate Earmark AST nodes intended to remove setup code from Earmark / EarmarkParser
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Hex
wojtekmach/earmark_parser
The Markdown to AST part of Earmark.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Hex
wojtekmach/mime
A read-only and immutable MIME type module for Elixir
Custom licenseSep 13, 2026 · metrics 2.10.0
Go · npm
wolftankk/grafana
The tool for beautiful monitoring and metric analytics & dashboards for Graphite, InfluxDB & Prometheus & More
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
crates.io
wpaulino/rust-lightning
A highly modular Bitcoin Lightning library written in Rust. Its Rust-Lightning, not Rusty's Lightning!
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
wpecker/go-workwx
a sensible Work Weixin(企业微信, Wechat Work) SDK for Go
Custom licenseOct 18, 2026 · metrics 2.10.0
—
wpecker/jiebago
Jieba 分词 Go 语言版
No licenseOct 19, 2026 · metrics 2.10.0
Go
wraix/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
PyPI
wroberts4/satpy
Python package for earth-observing satellite data processing
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
wwitteriii/go-scm
Package scm provides a unified interface to multiple source code management systems.
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
Go
xBlaz3kx/distributed-scheduler
A simple distributed scheduler with support for scheduling HTTP and AMQP messages.
MITSep 12, 2026 · metrics 2.10.0
—
xDimGG/discordgo
(Golang) Go bindings for Discord
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
—
xdfnet/iCodex
Codex 直连 DeepSeek 配置 + 白名单补丁工具。
MITSep 12, 2026 · metrics 2.10.0
crates.io
xeruf/diffr
Yet another diff highlighting tool
MITAug 23, 2026 · metrics 2.10.0
npm
xiaohuilam/intelephense
Intellisense for PHP
ISCAug 25, 2026 · metrics 2.10.0
Go
xing/terraform-provider-influxdb
Terraform provider for managing InfluxDB resources (buckets, tasks, checks)
No licenseSep 19, 2026 · metrics 2.10.0
crates.io
xiongjiwei/encoding_rs
A Gecko-oriented implementation of the Encoding Standard in Rust
Custom licenseSep 11, 2026 · metrics 2.10.0
—
xu001186/awx-go
AWX SDK for the Go programming language: https://github.com/ansible/awx
MITSep 19, 2026 · metrics 2.10.0
PyPI
xyc0815/pyVoIP
Pure python VoIP/SIP/RTP library. Currently supports PCMA, PCMU, and telephone-event
GPL-3.0Aug 25, 2026 · metrics 2.10.0
—
y-yagi/toml
TOML parser for Golang with reflection.
MITSep 20, 2026 · metrics 2.10.0
Go
yangcx000/lustre_exporter
Prometheus exporter for use with the Lustre parallel filesystem
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
yankeguo-deprecated/esexporter
dump Elasticsearch documents with buger/jsonparser, avoid decoding the whole response
MITSep 19, 2026 · metrics 2.10.0
Go
yankeguo-deprecated/summer
golang application framework
MITSep 19, 2026 · metrics 2.10.0
Go
yastij/cluster-api
Home for the Cluster Management API work, a subproject of sig-cluster-lifecycle
Apache-2.0Sep 14, 2026 · metrics 2.10.0
RubyGems
yasyf/versioned-routes-rails
Simple DSL for Versioned Routes in Rails
No licenseSep 20, 2026 · metrics 2.10.0
Packagist
yceruto/orm
Doctrine Object Relational Mapper (ORM)
MITOct 18, 2026 · metrics 2.10.0
Go
yelhousni/gnark
gnark is a fast zk-SNARK library that offers a high-level API to design circuits. The library is open source and developed under the Apache 2.0 license
Apache-2.0Sep 12, 2026 · metrics 2.10.0