Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,634
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
sandgorgon/tui
TUI library with no dependencies
MITSep 20, 2026 · metrics 2.10.0
npm
sanity-io/bifur-client
Bifur client
No licenseSep 18, 2026 · metrics 2.10.0
npm
sanity-io/blueprints-parser
A parser and validator for Sanity Blueprints
No licenseSep 15, 2026 · metrics 2.10.0
npm
sanity-io/signed-urls
Library for generating Ed25519-signed URLs
No licenseSep 15, 2026 · metrics 2.10.0
npm
sanoopbhaskerv/richly
Richly - a lightweight, zero-dependency WYSIWYG editor for JavaScript and React with full toolbar, tables, and theming support.
MITSep 14, 2026 · metrics 2.10.0
—
sansolovyov/peridot
a basic api for interacting with ring apps
No licenseSep 17, 2026 · metrics 2.10.0
Go
santanaluiz/ynab-cockpit
Local-first, security-hardened YNAB reporting CLI with complete API coverage
MITSep 20, 2026 · metrics 2.10.0
crates.io
santhreal/boundedio
TOCTOU-safe size-capped reads (file / reader / stdin) for the Santh fleet, defends against decompression-bomb and /dev/zero-style unbounded reads
Custom licenseSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/ctlog
Canonical Certificate Transparency (crt.sh) client and name-extraction parser for Santh scanners - single source of truth for CT-log subdomain/origin discovery.
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
santhreal/flashsieve
Storage-level pre-filtering for pattern matching
MITSep 17, 2026 · metrics 2.10.0
crates.io
santhreal/guise
Canonical browser fingerprint bundles, human-behavior timing, and TLS profile re-exports for the Santh fleet
Custom licenseSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/guise-choice
Uniform random selection and stealth-safe token primitives for the Santh fleet
No licenseSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/guise-pacing
Pure retry backoff, jitter, and Retry-After pacing primitives for the Santh fleet
No licenseSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/guise-profiles
Pure browser fingerprint profile identifiers and user-agent constants for Santh stealth stacks
No licenseSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/hashkit
Unified non-cryptographic hash functions
MITSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/netforge
High-performance raw packet I/O engine with AF_XDP, sendmmsg, and pnet backends
Custom licenseSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/procjail
Process sandbox for untrusted code - Linux namespaces, firejail, bubblewrap, watchdog timeout
MITSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/proxywire
Composable proxy selection and tunneling primitives for network clients
Custom licenseSep 15, 2026 · metrics 2.10.0
crates.io
santhreal/runtime-foxdriver
Firefox browser automation via WebDriver BiDi (runtime-foxdriver)
No licenseSep 17, 2026 · metrics 2.10.0
crates.io
santhreal/ziftsieve
Search compressed data without full decompression
MITSep 15, 2026 · metrics 2.10.0
npm
santi020k/eslint-config-basic
DX-first ESLint 10 flat config for JavaScript and TypeScript, with auto-detection and opt-in framework packages.
MITSep 18, 2026 · metrics 2.10.0
—
sarahkevinking/dbmate
:rocket: A lightweight, framework-agnostic database migration tool.
MITSep 20, 2026 · metrics 2.10.0
npm · PyPI
sarang-code2/FlakeIQ-Package
AI-powered test flake tracker. Classifies failures as real bugs vs flakes. Supports Playwright, Appium, Selenium, and more.
MITSep 13, 2026 · metrics 2.10.0
Go · npm
sargunv/horologia
A self-hosted task management application.
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
npm · PyPI · crates.io +2
saro-lab/dat
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
npm
saschanaz/browser-compat-data
This repository contains compatibility data for Web technologies as displayed on MDN
CC0-1.0Sep 14, 2026 · metrics 2.10.0
npm
sass-maker/app-health
Privacy-first endpoint health for Node, Go, and OpenTelemetry services.
No licenseSep 16, 2026 · metrics 2.10.0
—
satchel9/cetus
专注于稳定、性能和分布式事务的MySQL数据库中间件
GPL-2.0Sep 18, 2026 · metrics 2.10.0
Go
savannahghi/hapi-fhir-go
A go SDK for interacting with HAPI FHIR server
MITSep 19, 2026 · metrics 2.10.0
Go
sberz/ephemeral-envs
Auto-discovery for ephemeral environments on Kubernetes
MITSep 19, 2026 · metrics 2.10.0