Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,185
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
blendbyte/laravel-paypal
PayPal REST API client for Laravel and standalone PHP.
MITSep 6, 2026 · metrics 2.10.0
npm
CharlesWiltgen/Axiom
Battle-tested Claude Code skills for modern xOS (iOS, iPadOS, watchOS, tvOS) development
MITSep 6, 2026 · metrics 2.10.0
—
JusticeRage/Manalyze
A static analyzer for PE executables.
GPL-3.0Sep 2, 2026 · metrics 2.10.0
npm
auth0/lock
Auth0's signin solution
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist
mailgun/mailgun-php
Mailgun's Official SDK for PHP
MITSep 2, 2026 · metrics 2.10.0
npm
ponder-sh/ponder
The backend framework for crypto apps
MITSep 5, 2026 · metrics 2.10.0
crates.io
servo/ipc-channel
A multiprocess drop-in replacement for Rust channels
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Maven
awspring/spring-cloud-aws
The New Home for Spring Cloud AWS
Apache-2.0Aug 31, 2026 · metrics 2.10.0
Go
alvarorichard/GoAnime
A TUI tool to browse, stream, and download anime in PT-BR and EN
MITSep 4, 2026 · metrics 2.10.0
Packagist
mpociot/teamwork
User to Team associations with invitation system for the Laravel Framework
MITSep 3, 2026 · metrics 2.10.0
PyPI
RUCAIBox/TextBox
TextBox 2.0 is a text generation library with pre-trained language models
MITSep 5, 2026 · metrics 2.10.0
npm
taroify/taroify
Taroify 是移动端组件库 Vant 的 Taro 版本，两者基于相同的视觉规范，提供一致的 API 接口，助力开发者快速搭建小程序应用。
MITSep 6, 2026 · metrics 2.10.0
npm
toomuchdesign/re-reselect
Enhance Reselect selectors with deeper memoization and cache management.
MITSep 2, 2026 · metrics 2.10.0
Go · npm
floatpane/matcha
A beautiful and functional email client for your terminal, built with Go and the charming Bubble Tea TUI library. Never leave your command line to check your inbox or send an email again!
MITSep 6, 2026 · metrics 2.10.0
—
flutter-stripe/flutter_stripe
Flutter SDK for Stripe.
No licenseSep 6, 2026 · metrics 2.10.0
—
dungngminh/simutil
It's not just a cross-platform TUI app that quickly opens Android & iOS emulators/simulators
MITSep 5, 2026 · metrics 2.10.0
NuGet
fiso64/sockseek
Advanced download tool for Soulseek, soon a client.
AGPL-3.0Sep 6, 2026 · metrics 2.10.0
—
EhTagTranslation/Database
EhTagTranslation 项目的翻译数据。
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
SnowLuma/SnowLuma
Next Remote Protocol Framework.
Custom licenseSep 6, 2026 · metrics 2.10.0
npm
auth0/auth0.js
Auth0 headless browser sdk
MITSep 5, 2026 · metrics 2.10.0
Go · npm
marcus/sidecar
Use sidecar next to CLI agents for diffs, file trees, conversation history, and task management with td
MITSep 3, 2026 · metrics 2.10.0
Packagist · npm
Jacobtims/filament-breezy
Filament plugin for customizable profile page, two factor authentication & Sanctum token management.
MITSep 5, 2026 · metrics 2.10.0
npm · Packagist
iconify/icon-sets
200+ open source icon sets. Icons are validated, cleaned up, optimised, ready to render as SVG. Updated automatically several times a week.
No licenseSep 6, 2026 · metrics 2.10.0
Maven
yahoo/elide
Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort.
Custom licenseSep 6, 2026 · metrics 2.10.0
crates.io
lovasoa/dezoomify-rs
Zoomable image downloader for Google Arts & Culture, Zoomify, IIIF, and others
GPL-3.0Sep 6, 2026 · metrics 2.10.0
Maven
esig/dss
Digital Signature Service : creation, extension and validation of advanced electronic signatures
LGPL-2.1Sep 6, 2026 · metrics 2.10.0
—
pingcap/tiflash
The analytical engine for TiDB and TiDB Cloud. Try free: https://tidbcloud.com/free-trial
Apache-2.0Sep 6, 2026 · metrics 2.10.0
PyPI
process-intelligence-solutions/pm4py
Official public repository for PM4Py (Process Mining for Python) — an open-source library for exploring, analyzing, and optimizing business processes with Python.
AGPL-3.0Aug 31, 2026 · metrics 2.10.0
crates.io · PyPI · npm +5
yfedoseev/pdf_oxide
The fastest PDF library for Python and Rust. Text extraction, image extraction, markdown conversion, PDF creation & editing. 0.8ms mean, 5× faster than industry leaders, 100% pass rate on 3,830 PDFs. MIT/Apache-2.0.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
OpenUserJS/OpenUserJS.org
The home of FOSS user scripts.
GPL-3.0Sep 5, 2026 · metrics 2.10.0