Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,141
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
phan/phan
Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.
Custom licenseOct 24, 2026 · metrics 2.10.0
Go · RubyGems
matrix-org/dendrite
Dendrite is a second-generation Matrix homeserver written in Go!
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
haraka/Haraka
A fast, highly extensible, and event driven SMTP server
MITOct 24, 2026 · metrics 2.10.0
crates.io
libp2p/rust-libp2p
The Rust Implementation of the libp2p networking stack.
MITOct 24, 2026 · metrics 2.10.0
npm
assaf/zombie
Insanely fast, full-stack, headless browser testing using node.js
MITSep 17, 2026 · metrics 2.10.0
—
Azure/azure-sdk-for-python
This repository is for active development of the Azure SDK for Python. For consumers of the SDK we recommend visiting our public developer docs at https://learn.microsoft.com/python/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-python.
MITOct 24, 2026 · metrics 2.10.0
npm
airbnb/ts-migrate
A tool to help migrate JavaScript code quickly and conveniently to TypeScript
MITOct 18, 2026 · metrics 2.10.0
npm
pk910/PoWFaucet
Modularized faucet for EVM chains with different protection methods (Captcha, Mining, IP, Mainnet Balance, Gitcoin Passport and more)
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI · RubyGems
google/clusterfuzz
Scalable fuzzing infrastructure.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
disposable-email-domains/disposable-email-domains
a list of disposable email domains
Custom licenseOct 24, 2026 · metrics 2.10.0
crates.io
ReagentX/imessage-exporter
Export iMessage data + run iMessage Diagnostics
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
PaulLeCam/react-leaflet
React components for Leaflet maps
Custom licenseOct 20, 2026 · metrics 2.10.0
NuGet
crosire/reshade
A generic post-processing injector for games and video software.
BSD-3-ClauseOct 18, 2026 · metrics 2.10.0
Packagist
phpseclib/phpseclib
PHP Secure Communications Library
MITOct 24, 2026 · metrics 2.10.0
npm · Packagist
kuaifan/dootask
DooTask是一款开源在线项目任务管理工具，提供各类文档协作工具、在线思维导图、在线流程图、项目管理、任务分发、即时IM，文件管理等工具；同时消息功能使用非对称加密技术让你的沟通更安全。
AGPL-3.0Oct 24, 2026 · metrics 2.10.0
Go
caddyserver/certmagic
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI · crates.io
lief-project/LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
russross/blackfriday
Blackfriday: a markdown processor for Go
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
freelensapp/freelens
Free IDE for Kubernetes
MITSep 18, 2026 · metrics 2.10.0
npm
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
MITSep 16, 2026 · metrics 2.10.0
PyPI
adamchainz/django-cors-headers
Django app for handling the server headers required for Cross-Origin Resource Sharing (CORS)
MITOct 24, 2026 · metrics 2.10.0
npm · PyPI
chrisleekr/binance-trading-bot
Automated Binance trading bot with pluggable strategies, historical backtesting, and a live dashboard
Apache-2.0Oct 16, 2026 · metrics 2.10.0
—
mono/SkiaSharp
SkiaSharp is a cross-platform 2D graphics API for .NET platforms based on Google's Skia Graphics Library. It provides a comprehensive 2D API that can be used across mobile, server and desktop models to render images.
MITOct 5, 2026 · metrics 2.10.0
PyPI
zenml-io/zenml
ZenML 🙏: One AI Platform from Pipelines to Agents. https://zenml.io.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
nanopb/nanopb
Protocol Buffers with small code size
ZlibSep 17, 2026 · metrics 2.10.0
PyPI
wiltodelta/remove-ai-watermarks
Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
RubyGems
Hackplayers/evil-winrm
The ultimate WinRM shell for hacking/pentesting
LGPL-3.0Oct 24, 2026 · metrics 2.10.0
—
chrisant996/clink
Bash's powerful command line editing in cmd.exe
GPL-3.0Oct 24, 2026 · metrics 2.10.0
Go
pterm/pterm
✨ PTerm is a modern Go module to easily beautify console output. Featuring charts, progressbars, tables, trees, text input, select menus and much more 🚀 It's completely configurable and 100% cross-platform compatible.
MITOct 24, 2026 · metrics 2.10.0
PyPI
google-deepmind/open_spiel
OpenSpiel is a collection of environments and algorithms for research in general reinforcement learning and search/planning in games.
Apache-2.0Oct 24, 2026 · metrics 2.10.0