Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,682
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
CAFxX/httpcompression
Go middleware to compress HTTP responses with Gzip, Deflate, Brotli, Zstandard, XZ/LZMA2, LZ4, and more..
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
Dynatrace/dynatrace-oneagent-operator
Kubernetes/Openshift Operator for managing Dynatrace OneAgent deployments
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
SatelliteShorelines/CoastSeg
An interactive toolbox for downloading satellite imagery, applying image segmentation models, mapping shoreline positions and more. The mapping extension for CoastSat and Zoo.
GPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
cardano-foundation/cardano-connect-with-wallet
This repository aims to provide useful hooks and React components as well as a framework-independent core library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Hex
dannote/folio
Print-quality PDF/SVG/PNG from Markdown + Elixir, powered by Typst
MITSep 19, 2026 · metrics 2.10.0
Go
gurkankaymak/hocon
go implementation of lightbend's HOCON configuration library https://github.com/lightbend/config
MITSep 18, 2026 · metrics 2.10.0
npm
nulab/bee
Command-line tool to view and manage Backlog
MITSep 19, 2026 · metrics 2.10.0
npm
nuxt-modules/kinde
Kinde integration for Nuxt
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
spdx/ntia-conformance-checker
Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
synadia-io/orbit.go
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist · npm
PhpCodeArcheology/PhpCodeArcheology
PHP static analysis for architecture & maintainability — 60+ metrics, complexity analysis, dependency graphs, git churn hotspots, and AI-ready MCP server. Alternative to PHPMetrics.
MITSep 19, 2026 · metrics 2.10.0
npm
Uanela/arkos
Arkos.js - The Express And Prisma RESTful Framework
MITSep 18, 2026 · metrics 2.10.0
Go
UiPath/uipathcli
Command line interface to simplify, script and automate API calls for UiPath services
MITSep 19, 2026 · metrics 2.10.0
npm
alexk111/node-red-node-typescript-starter
🏁 Quick-start template repository for creating new Node-RED node sets in TypeScript.
MITSep 20, 2026 · metrics 2.10.0
npm
apify/apify-client-js
Apify API client for JavaScript / Node.js.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
cert-manager/approver-policy
approver-policy is a cert-manager approver that allows users to define policies that restrict what certificates can be requested.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
cgohlke/roifile
Read and write ImageJ ROI format.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
npm
cheminfo/openchemlib-js
JavaScript port of OpenChemLib
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
—
facebookarchive/clock
Clock is a small library for mocking time in Go.
MITSep 23, 2026 · metrics 2.10.0
Go · npm
lets-cli/lets
CLI task runner for developers - a better alternative to make
MITSep 19, 2026 · metrics 2.10.0
npm
mapbox/mr-ui
UI components for Mapbox projects
BSD-2-ClauseSep 18, 2026 · metrics 2.10.0
Go
risingwavelabs/risingwave-operator
RisingWave Kubernetes Operator
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
threshold-network/tbtc-v2
Trust-minimized tokenized Bitcoin everywhere
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
translate-tools/core
A translator's kit that uses the free APIs of Google Translate, Yandex, Bing, ChatGPT, and other LLMs
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
cipchk/ngx-filesaver
Simple file save with FileSaver.js
MITSep 18, 2026 · metrics 2.10.0
Go
docker/go-metrics
Package for metrics collection in Docker projects
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
eggjs/static
static server plugin for egg
MITSep 18, 2026 · metrics 2.10.0
—
gwen001/vhost-brute
A PHP tool to brute force vhost configured on a server.
MITSep 18, 2026 · metrics 2.10.0
npm · crates.io
jbolda/covector
Transparent and flexible change management for publishing packages and assets.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
jchv/go-winloader
[WIP] Implementation of the Windows module loader in pure Go, with no CGo.
ISCSep 23, 2026 · metrics 2.10.0