Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,487
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · npm
MarinX/agewasm
A simple and secure online client-side Age key generator, encryption and decryption tool built using wasm
MITSep 18, 2026 · metrics 2.10.0
PyPI
PilotLightTech/pilotlight
Lightweight real-time application framework
MITSep 18, 2026 · metrics 2.10.0
PyPI
Qiskit/qiskit-serverless
A programming model for leveraging quantum and classical resources
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
errwischt/stacktrace-parser
Parses every stack trace into a nicely formatted array of hashes.
MITSep 23, 2026 · metrics 2.10.0
Go
hashicorp/go-msgpack
Open-Source Go Code. msgpack.org[Go]
MITSep 23, 2026 · metrics 2.10.0
NuGet
loresoft/Blazilla
A library for using FluentValidation with Blazor EditForm components. Provides seamless integration between FluentValidation and Blazor forms with support for real-time validation, nested objects, async validation, and rule sets.
MITSep 18, 2026 · metrics 2.10.0
npm
mfucci/node-matter
Matter protocol client / server for node.js
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
oaswrap/spec
⚡A lightweight, framework-agnostic OpenAPI 3.x specification builder for Go.
MITSep 18, 2026 · metrics 2.10.0
Go
smarty/gunit
xUnit-style test fixture adapter for go test
Custom licenseSep 19, 2026 · metrics 2.10.0
Go · npm
argoproj-labs/argocd-ephemeral-access
A kubernetes controller to manage Argo CD temporary access
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
ben-vargas/pi-packages
Packages for Pi - extensions, skills, prompt templates, and themes.
MITSep 18, 2026 · metrics 2.10.0
crates.io
namidb/namidb
Graph database native to the cloud. Embedded, multi-tenant, built on object storage.
Custom licenseSep 18, 2026 · metrics 2.10.0
—
terraform-google-modules/terraform-google-pubsub
Creates Pub/Sub topic and subscriptions associated with the topic
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
drodil/backstage-plugin-qeta
Internal Q&A and knowledge base for Backstage. Empower teams to share knowledge, ask questions, and integrate AI-powered answers directly into their developer portal.
MITSep 19, 2026 · metrics 2.10.0
npm · PyPI · Go
manaflow-ai/subrouter
Subrouter routes Codex/Claude Code traffic across multiple ChatGPT Pro/Claude Max subscriptions and API keys.
MITSep 19, 2026 · metrics 2.10.0
npm
martinthomson/aasvg
Turn ASCII art into SVG
BSD-2-ClauseSep 18, 2026 · metrics 2.10.0
Packagist
mtownsend5512/xml-to-array
Easily convert valid xml to a php array.
MITSep 18, 2026 · metrics 2.10.0
Go
pradipta/wallfacer
A terminal session manager for Claude Code, and more
MITSep 20, 2026 · metrics 2.10.0
Go
rockorager/vaxis
a modern tui library for go (mirror of git.sr.ht/~rockorager/vaxis)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
joeferner/node-bplist-parser
Binary plist parser.
No licenseSep 23, 2026 · metrics 2.10.0
Go
luikyv/go-oidc
A configurable OpenID Provider built in Go.
MITSep 19, 2026 · metrics 2.10.0
crates.io
neuml/txtai.rs
Rust client for txtai
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
parallaxsecond/rust-cryptoki
Rust wrapper for the PKCS #11 API, Cryptoki
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · npm
KKKZOZ/hugo-admonitions
A lightweight Hugo module that adds beautiful and customizable admonition blocks to your content.
MITSep 19, 2026 · metrics 2.10.0
Packagist
SymfonyTest/symfony-bundle-test
Smoke test your Symfony bundle
MITSep 19, 2026 · metrics 2.10.0
—
apache/daffodil
Apache Daffodil
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
mackerelio/mkr
Command Line Tool for Mackerel
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
poposnail61/min-sans
한·중·일 문자와 라틴 문자, 숫자를 조화롭게 만든 다국어 글꼴
OFL-1.1Sep 19, 2026 · metrics 2.10.0
Maven
DemchaAV/GraphCompose
Declarative Java engine for structured documents. Automatic layout, pagination, reusable templates and themes. Render print-ready PDF, export editable PowerPoint, or generate semantic DOCX.
MITSep 19, 2026 · metrics 2.10.0
crates.io
alloy-rs/rlp
Fast implementation of Ethereum RLP serialization
Apache-2.0Sep 23, 2026 · metrics 2.10.0