Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,308
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
aligay/jsonuri
🌳 阿里剑鱼、iceluna、vanex 数据操作底层库，使用O(n) 复杂度回溯祖先节点
MITSep 18, 2026 · metrics 2.10.0
—
andisearch/airun
Run AI prompts like programs. Executable markdown with shebang, Unix pipes, and output redirection. Extends Claude Code with cross-cloud provider switching and any-model support — free local or 100+ cloud models.
MITSep 18, 2026 · metrics 2.10.0
crates.io
d-e-s-o/test-log
A replacement of the #[test] attribute that initializes logging and/or tracing infrastructure before running tests.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
go-text/typesetting
High quality text shaping in pure Go.
Custom licenseSep 23, 2026 · metrics 2.10.0
npm
joshforisha/open-simplex-noise
OpenSimplex noise for TypeScript/JavaScript
UnlicenseSep 24, 2026 · metrics 2.10.0
Go
nix-community/go-nix
Elements of Nix re-implemented as Go libraries [maintainer=@flokli]
Apache-2.0Sep 23, 2026 · metrics 2.10.0
crates.io
shssoichiro/ffmpeg-the-third
A fork of the abandoned ffmpeg-next crate which is a fork of the abandoned ffmpeg crate
WTFPLSep 18, 2026 · metrics 2.10.0
Go · npm
stephnangue/warden
The secure gateway connecting AI agents to enterprise systems.
MPL-2.0Sep 18, 2026 · metrics 2.10.0
—
MistEO/meojson
✨ Next-gen C++ JSON Serialization Engine | Zero Dependency | Header-Only | Unleash JSON Potential
MITSep 18, 2026 · metrics 2.10.0
Go
anaskhan96/go-password-encoder
Go package to encode (with random generated salt) and verify passwords
MITSep 20, 2026 · metrics 2.10.0
crates.io
danburkert/fs2-rs
Extended utilities for working with files and filesystems in Rust
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
dhicoc/dsh-reverse-skill
Complete reverse-skill (87 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
MITSep 21, 2026 · metrics 2.10.0
npm
geomatico/maplibre-cog-protocol
Display Cloud Optimized GeoTIFFs, satellite imagery and elevation models directly in MapLibre GL JS
MITSep 19, 2026 · metrics 2.10.0
npm
just-every/mcp-read-website-fast
Quickly reads webpages and converts to markdown for fast, token efficient web scraping
MITSep 20, 2026 · metrics 2.10.0
Go
mintance/nginx-clickhouse
Simple nginx logs parser & transporter to ClickHouse database.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
Hostzero-GmbH/keycloak-operator
Kubernetes operator for Keycloak. Manage realms, clients, users, roles, and identity providers as code. Features GitOps support, automatic secret sync, drift detection, and works with Keycloak 20-26+.
MITSep 20, 2026 · metrics 2.10.0
Go · npm
VictoriaMetrics/victoriametrics-datasource
Grafana datasource for VictoriaMetrics
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
lextudio/pysnmp
Python SNMP library
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
npm
mmai/glicko2js
Glicko2 javascript implementation
MITSep 20, 2026 · metrics 2.10.0
npm
neuml/txtai.js
JavaScript client for txtai
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
telerik/kendo-themes
Monorepo for SASS-based Kendo UI themes
No licenseSep 18, 2026 · metrics 2.10.0
RubyGems · npm
testdouble/static-rails
Build & serve static sites (e.g. Jekyll, Hugo) from your Rails app
MITSep 21, 2026 · metrics 2.10.0
npm
vercel/sdk
Vercel SDK is a type-safe Typescript SDK that gives you access to the Vercel REST API.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
MannLabs/alphapeptdeep
Deep learning framework for proteomics
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
Starainrt/astro
Astro: Go Astronomy Algorithms Library - Chinese Lunar Calendar, Solar/Lunar Eclipses, Sun/Moon/Planet Positions, Rise/Set, Planet Events, Stars, Coordinates, Orbits, Sundials and Lightweight Ephemerides (天文算法 Go 库：农历、日月食、日月行星位置、升落、行星天象、恒星、坐标、轨道、日晷与轻量星历)
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
YorCreative/Laravel-Scrubber
A Laravel package to scrub sensitive information that breaks operational security policies from being leaked on accident or not by developers.
MITSep 18, 2026 · metrics 2.10.0
crates.io · PyPI
abyo-software/s4
GPU-accelerated transparent compression S3-compatible storage gateway. Drop-in replacement for AWS S3 endpoints; cuts your S3 bill 50-80% with no app changes (Rust, nvCOMP, zstd).
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
clawscli/claws
k9s-inspired TUI for AWS resource management with vim-style navigation
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
connectrpc/otelconnect-go
OpenTelemetry tracing and metrics for Connect.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
crates.io
linebender/velato
An integration to parse and render Lottie with Vello.
Apache-2.0Sep 18, 2026 · metrics 2.10.0