Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,277
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
leahneukirchen/xtools
a few helpers for working with XBPS
No licenseSep 19, 2026 · metrics 2.10.0
Go
puzed/wrapguard
Userspace WireGuard proxy for transparent network tunneling
MITSep 19, 2026 · metrics 2.10.0
npm
alloc/drizzle-plus
A collection of useful utilities and extensions for Drizzle ORM
MITSep 22, 2026 · metrics 2.10.0
Go
charmbracelet/keygen
An SSH key pair generator 🗝️
MITSep 20, 2026 · metrics 2.10.0
—
device-management-toolkit/deployment
Device Management Toolkit offers open-source microservices, applications and libraries to streamline Intel AMT integration, simplifying out-of-band management solutions for Intel vPro Platforms.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
jannistpl/egui-file-dialog
Full featured and customizable file dialog for egui
MITSep 18, 2026 · metrics 2.10.0
Go
jsimonetti/rtnetlink
Package rtnetlink provides low-level access to the Linux rtnetlink API. MIT Licensed.
MITSep 23, 2026 · metrics 2.10.0
npm · crates.io
kunkunsh/kkrpc
A TypeScript RPC protocol for multiple environments (iframe, web worker, stdio, http, WebSocket)
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
leekelleher/umbraco-contentment
Contentment for Umbraco - a state of happiness and satisfaction
MITSep 18, 2026 · metrics 2.10.0
PyPI
mapnik/python-mapnik
Python bindings for mapnik
LGPL-2.1Sep 19, 2026 · metrics 2.10.0
crates.io
petgraph/fixedbitset
A simple bitset container for Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
rust-embedded/critical-section
Pluggable critical section
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
tilo/validates_overlap
Adds ActiveRecord validations that prevent overlapping datetime and other linearly ordered ranges — bookings, reservations, meetings, shifts. One SQL query; supports scoping and open-ended ranges. Supports Rails 6.1–8.1
MITSep 17, 2026 · metrics 2.10.0
PyPI
ansible-collections/ansible.netcommon
Ansible Network Collection for Common Code
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
arleyGuoLei/wechat-app-words-pk
微信小程序 云开发 毕业设计「 单词天天斗 」，好友/匹配/人机 对战，单词 本科毕设 typescript 原生微信小程序
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
igoogolx/lux
A light desktop proxy app
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
jpillora/opts
A Go (golang) package for building frictionless command-line interfaces
MITSep 18, 2026 · metrics 2.10.0
Go
masahide/OmniSSHAgent
Integrated ssh-agent for windows. (pageant compatible. openSSH ssh-agent etc ..)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
oiweiwei/go-msrpc
Go client library for Windows MS-RPC and DCOM: DCE/RPC v5, NDR/NDR64, Kerberos/NTLM/SPNEGO, SMB2, and generated stubs for 100+ Windows protocols
MITSep 19, 2026 · metrics 2.10.0
crates.io
trifectatechfoundation/bzip2-rs
libbz2 (bzip2 compression) bindings for Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
dfinity/icp-js-core
The base library to build applications on the Internet Computer.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
eoyilmaz/timecode
Python Module for SMPTE Time Code Manipulation
MITSep 17, 2026 · metrics 2.10.0
Go
gertd/go-pluralize
Pluralize and singularize any word (golang adaptation of https://www.npmjs.com/package/pluralize)
MITSep 23, 2026 · metrics 2.10.0
PyPI
python-trio/asyncclick
Python composable command line utility, trio-compatible version
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
spdx/tools-golang
Collection of Go packages to work with SPDX files
Custom licenseSep 23, 2026 · metrics 2.10.0
Maven
AbsaOSS/cobrix
A COBOL parser and Mainframe/EBCDIC data source for Apache Spark
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
banthagroup/fslightbox-react
Basic version of Fullscreen Lightbox for React.js. Website: https://fslightbox.com/react
MITSep 20, 2026 · metrics 2.10.0
Maven
box/box-java-sdk
The Box SDK for Java.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist · RubyGems
citation-style-language/locales
Official repository for Citation Style Language (CSL) locale files.
No licenseSep 17, 2026 · metrics 2.10.0
npm · PyPI
counterfact/api-simulator
Turn an OpenAPI spec into a local API in one command. Build and test your frontend with custom responses, shared state, and simulated failures, without waiting for the backend.
MITSep 18, 2026 · metrics 2.10.0