Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,471
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
zkcrypto/jubjub
Implementation of the Jubjub elliptic curve group
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
FelixTheC/strongtyping
Decorator which checks whether the function is called with the correct type of parameters.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go · npm
OrlojHQ/orloj
An orchestration runtime for multi-agent AI systems. Declare agents, tools, and policies as YAML; Orloj schedules, executes, routes, and governs them for production-grade operation.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
SukkaW/react-compiler-webpack
The webpack/rspack loader for React Compiler
MITSep 19, 2026 · metrics 2.10.0
crates.io · PyPI
developmentseed/async-tiff
Async TIFF reader for Rust and Python
MITSep 19, 2026 · metrics 2.10.0
Go
diogovalentte/homarr-iframes
iFrames of many selfhosted services to use in ANY dashboard.
MITSep 19, 2026 · metrics 2.10.0
—
drone/docs
Documentation for the Drone Continuous Integration project
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io · npm
kwonoj/swc-plugin-coverage-instrument
istanbuljs compatible SWC coverage instrumentation plugin
MITSep 23, 2026 · metrics 2.10.0
—
noahcoad/SublimeGoogleSpellCheck
Uses Google Search spelling magic to fix words or phrases for Sublime Text.
MITSep 19, 2026 · metrics 2.10.0
Go
openshift/api
Canonical location of the OpenShift API definition.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
redhat-actions/push-to-registry
GitHub Action to push a container image to an image registry.
MITSep 20, 2026 · metrics 2.10.0
Go
syngit-org/syngit
Syngit - Kubernetes operator to push resources on a git repository and manage their lifecycle.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
vlebo/ctx
Multi-environment context switcher
MITSep 20, 2026 · metrics 2.10.0
crates.io
xemwebe/yahoo_finance_api
Simple wrapper to yahoo! finance API to retrieve latest quotes and end-of-day quote histories
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
GoogleCloudPlatform/cloud-sql-proxy-operator
A Kubernetes Operator to automatically configure secure connections to Cloud SQL
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
ZenGo-X/zk-paillier
A collection of Paillier cryptosystem zero knowledge proofs
GPL-3.0Sep 20, 2026 · metrics 2.10.0
npm · Go
hellolib/agent-notify
一个面向 AI Agent 的通知配置工具。支持将 Claude Code、Codex、Grok Build 等 Agent 的事件通知推送到飞书、企业微信、钉钉和系统通知。
MITSep 18, 2026 · metrics 2.10.0
Go
jedisct1/go-minisign
Minisign verification library for Golang.
MITSep 23, 2026 · metrics 2.10.0
—
martinus/svector
Compact SVO optimized vector for C++17 or higher
MITSep 19, 2026 · metrics 2.10.0
Go
shakinm/xlsReader
Go - lib for read xls (Excel) file
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
suifei/asm2hex
ASM2HEX 是一款功能强大的汇编语言与十六进制机器码相互转换工具。它提供了一个直观的图形界面,让用户可以轻松地在汇编指令和对应的机器码之间进行转换。无论你是处理 ARM64、ARM 还是 Thumb 指令集,ASM2HEX 都能提供准确可靠的转换结果。ASM2HEX is a powerful tool for bidirectional conversion between assembly language and hexadecimal machine code.
MITSep 20, 2026 · metrics 2.10.0
Packagist
twigphp/markdown-extra
A Twig extension for Markdown
MITSep 18, 2026 · metrics 2.10.0
npm
ui5-community/wdi5
official UI5 end-to-end test framework for UI5 web-apps. wdi5 = Webdriver.IO + UI5 Test API
Apache-2.0Sep 20, 2026 · metrics 2.10.0
RubyGems
webtranslateit/webtranslateit
A CLI to sync locale files with webtranslateit.com.
MITSep 18, 2026 · metrics 2.10.0
crates.io
Nugine/const-str
Compile-time string operations
MITSep 23, 2026 · metrics 2.10.0
crates.io
al8n/fs4
Extended utilities for working with files and filesystems in Rust. This is a fork of the fs2-rs crate, the aim for this fork is to support async and replace libc with rustix.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
canboat/canboatjs
A TypeScript library for parsing, encoding, and interfacing with NMEA 2000 marine electronics networks
Apache-2.0Sep 22, 2026 · metrics 2.10.0
Packagist
contentful/contentful.php
Official PHP Library for the Content Delivery API
MITSep 18, 2026 · metrics 2.10.0
npm
lynx-family/lynx-ui
Out-of-the-box Lynx Component Library
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Hex
mcass19/ex_ratatui
Elixir bindings for the Rust ratatui terminal UI library
MITSep 24, 2026 · metrics 2.10.0