Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,221
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
AZ-X/pique
An advanced DNS stub with Freedom, Privacy and Security --- THRICE UPON A TIME
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
Ahmedhossamdev/PrintLayout
PrintLayout: A lightweight Go tool to visualize project directory structures in a clean, tree-like format. Perfect for exploring codebases, documenting projects, or understanding file organization at a glance. Simple, customizable, and developer-friendly.
MITSep 20, 2026 · metrics 2.10.0
Go
blizzy78/varnamelen
Go analyzer checking that the length of a variable's name matches its usage scope
MITSep 16, 2026 · metrics 2.10.0
npm
dk1a/solidity-stringutils
StrSlice & Slice library for Solidity
MITSep 19, 2026 · metrics 2.10.0
Maven
goto1134/structurizr-d2-exporter
Export structurizr views to D2 diagrams
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
hughsk/is-typedarray
Detect whether or not an object is a Typed Array
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
jsdom/w3c-xmlserializer
An XML serializer that follows the W3C specification.
MITSep 16, 2026 · metrics 2.10.0
Hex
mirego/plug_image_processing
Endpoint to process images within your Plug application, compatible with imaginary API
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
crates.io
niklastreml/gitlab-tui
A terminal based UI for interacting with your gitlab issues and merge requests
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
roadrunner-php/worker
Base PHP worker for RoadRunner server.
MITSep 18, 2026 · metrics 2.10.0
crates.io
sgodwincs/ordered-multimap-rs
An ordered multimap.
MITSep 18, 2026 · metrics 2.10.0
npm
syncmaven/syncmaven
Open-source Reverse-ETL and Data Activation
No licenseSep 20, 2026 · metrics 2.10.0
—
OpenMiNET/OpenMiNET
Custom MiNET Plugin API - Making it easier for multiple plugins to work together nicely.
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
Packagist
elastic/elastic-transport-php
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
crates.io · Go
kroma-network/zkevm-circuits
This is a mirror of zkevm-circuits(https://github.com/scroll-tech/zkevm-circuits).
MITSep 18, 2026 · metrics 2.10.0
npm
octokit/plugin-enterprise-server.js
Octokit plugin for GitHub Enterprise REST APIs
MITSep 16, 2026 · metrics 2.10.0
Go
PGSSoft/terraform-provider-mssql
MS SQL Terraform provider
MITSep 19, 2026 · metrics 2.10.0
—
TACC/Galaxy
Galaxy is an asynchronous parallel visualization ray tracer for performant rendering in distributed computing environments. Galaxy builds upon Intel OSPRay and Intel Embree, including ray queueing and sending logic inspired by TACC GraviT.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · npm
algonius/algonius-browser
MCP browser automation server. Exposes browser control tools to external AI systems via Model Context Protocol. Open-source & secure.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
captainhook-git/plugin-composer
A composer-Plugin to easily use CaptainHook
MITSep 16, 2026 · metrics 2.10.0
RubyGems
chatwoot/twitty
Ruby client for Twitter Business APIs
MITSep 20, 2026 · metrics 2.10.0
Go
go-toolsmith/astcopy
Package astcopy implements Go AST deep copy operations.
MITSep 16, 2026 · metrics 2.10.0
npm · PyPI
opnfv/samplevnf
Mirror of the OPNFV Sample Virtual Network Function Project
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
tikv/importer
tikv-importer is a front-end to help ingesting large number of KV pairs into a TiKV cluster
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
DE-labtory/bifrost
P2P network library suppoting it-chain 📨
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
Finschia/iavl
Merkleized IAVL+ Tree implementation in Go forked from cosmos/iavl(https://github.com/cosmos/iavl)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
NubeDev/bacnet
No repository description published.
GPL-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
PavanTatikonda/itypes
Basic immutable container types for Python.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
alingse/asasalint
Golang linter, lint pass any slice as any in variadic function
MITSep 16, 2026 · metrics 2.10.0
crates.io
datafuse-extras/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Apache-2.0Sep 20, 2026 · metrics 2.10.0