Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,185
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
baryhuang/claude-code-by-agents
Desktop app and API created in public for multi-agent Claude Code orchestration - coordinate local and remote agents through @mentions.
MITSep 5, 2026 · metrics 2.10.0
npm
sindresorhus/configstore
Easily load and persist config without having to think about where and how
BSD-2-ClauseAug 31, 2026 · metrics 2.10.0
Packagist · npm
laravel/react-starter-kit
No repository description published.
No licenseSep 5, 2026 · metrics 2.10.0
npm · Packagist
coreui/coreui
Open Source UI Kit built on top of Bootstrap 5 and plain JavaScript without any additional libraries like jQuery
MITSep 5, 2026 · metrics 2.10.0
npm · PyPI
zentralopensource/zentral
Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
osmlab/name-suggestion-index
Canonical common brand names, operators, transit, and flags for OpenStreetMap.
BSD-3-ClauseAug 31, 2026 · metrics 2.10.0
PyPI
scikit-fuzzy/scikit-fuzzy
Fuzzy Logic SciKit (Toolkit for SciPy)
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist
vanilophp/framework
The truly Laravel E-commerce Framework
MITSep 2, 2026 · metrics 2.10.0
Packagist
edalzell/laravel-passwordless-login
A simple, safe magic login link generator for Laravel
MITSep 5, 2026 · metrics 2.10.0
npm
zio/zio-http
A next-generation Scala framework for building scalable, correct, and efficient HTTP clients and servers
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
tree-sitter/node-tree-sitter
Node.js bindings for tree-sitter
MITAug 31, 2026 · metrics 2.10.0
npm
acrazing/dpdm
Detect circular dependencies in your TypeScript projects.
MITSep 1, 2026 · metrics 2.10.0
npm
dotenvx/react-native-dotenv
Load .env into React Native - with support for multiple .env files.
MITAug 31, 2026 · metrics 2.10.0
PyPI
MIT-LCP/wfdb-python
Native Python WFDB package
MITSep 5, 2026 · metrics 2.10.0
PyPI
Pipelex/pipelex
Declarative language for composable Al workflows. Devtool for agents and mere humans.
MITSep 5, 2026 · metrics 2.10.0
Packagist
webpatser/laravel-countries
Laravel Countries is a bundle for Laravel, providing Almost ISO 3166_2, 3166_3, currency, Capital and more for all countries.
MITSep 5, 2026 · metrics 2.10.0
npm
sindresorhus/debounce
Delay function calls until a set time elapses after the last invocation
Custom licenseAug 31, 2026 · metrics 2.10.0
Maven
BluSunrize/ImmersiveEngineering
Wires, transformers, high voltage! Bzzzzt!
Custom licenseSep 5, 2026 · metrics 2.10.0
crates.io
rust-secure-code/cargo-auditable
Make production Rust binaries auditable
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
jonhoo/bus
Efficient, lock-free, bounded Rust broadcast channel
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Packagist
spatie/geocoder
Geocode addresses to coordinates
MITSep 1, 2026 · metrics 2.10.0
npm
joshmarinacci/node-pureimage
Pure JS implementation of the HTML Canvas 2D drawing API
MITSep 5, 2026 · metrics 2.10.0
npm · RubyGems
dradis/dradis-ce
Dradis Framework: Collaboration and reporting for IT Security teams
GPL-2.0Sep 5, 2026 · metrics 2.10.0
Go · npm
umputun/revdiff
TUI for reviewing diffs, files, and documents with inline annotations
MITSep 5, 2026 · metrics 2.10.0
RubyGems
ankane/torch.rb
Deep learning for Ruby, powered by LibTorch
Custom licenseSep 6, 2026 · metrics 2.10.0
Go
wundergraph/graphql-go-tools
GraphQL Router / API Gateway framework written in Golang, focussing on correctness, extensibility, and high-performance. Supports Federation v1 & v2, Subscriptions & more.
MITSep 5, 2026 · metrics 2.10.0
RubyGems
ruby/typeprof
An experimental type-level Ruby interpreter for testing and understanding Ruby code
MITSep 3, 2026 · metrics 2.10.0
npm
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
MITSep 6, 2026 · metrics 2.10.0
npm
farcasterxyz/hub-monorepo
Implementation of the Farcaster Hub specification and supporting libraries for building applications on Farcaster
MITSep 4, 2026 · metrics 2.10.0
npm
import-js/eslint-import-resolver-typescript
This resolver adds `TypeScript` support to `eslint-plugin-import(-x)`
ISCAug 31, 2026 · metrics 2.10.0