Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,333
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
apache/tika
The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI · npm
microsoft/apm
Agent Package Manager
MITOct 20, 2026 · metrics 2.10.0
Packagist
LaravelCollective/html
HTML and Form Builders for the Laravel Framework
MITOct 20, 2026 · metrics 2.10.0
Maven
corda/corda
Corda is an open source blockchain project, designed for business from the start. Only Corda allows you to build interoperable blockchain networks that transact in strict privacy. Corda's smart contract technology allows businesses to transact directly, with value.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
async-rs/async-std
Async version of the Rust standard library
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
steipete/oracle
Ask the oracle when you're stuck. Invoke GPT-5 Pro with a custom context and files.
MITOct 20, 2026 · metrics 2.10.0
NuGet
mcintyre321/OneOf
Easy to use F#-like ~discriminated~ unions for C# with exhaustive compile time matching
MITOct 21, 2026 · metrics 2.10.0
Maven
microsoft/SEAL
Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.
MITOct 22, 2026 · metrics 2.10.0
PyPI
datamodel-code-generator/datamodel-code-generator
Generate Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON/YAML/CSV.
MITOct 18, 2026 · metrics 2.10.0
PyPI
checkpoint-restore/criu
Checkpoint/Restore tool
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
roboll/helmfile
Deploy Kubernetes Helm Charts
MITOct 21, 2026 · metrics 2.10.0
crates.io
modelcontextprotocol/rust-sdk
The official Rust SDK for the Model Context Protocol
Custom licenseOct 20, 2026 · metrics 2.10.0
Packagist
symfony/polyfill-ctype
Symfony polyfill for ctype functions
MITOct 20, 2026 · metrics 2.10.0
Go
cel-expr/cel-spec
Common Expression Language -- specification and binary representation
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
denoland/rusty_v8
Rust bindings for the V8 JavaScript engine
MITOct 20, 2026 · metrics 2.10.0
Packagist
stripe/stripe-php
PHP library for the Stripe API.
MITOct 20, 2026 · metrics 2.10.0
crates.io
maplibre/martin
Blazing fast and lightweight PostGIS, MBtiles and PMtiles tile server, tile generation, and mbtiles tooling.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
NuGet
ravendb/ravendb
ACID Document Database
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
TransformerLensOrg/TransformerLens
A library for mechanistic interpretability of GPT-style language models
MITOct 22, 2026 · metrics 2.10.0
PyPI
iree-org/iree
A retargetable MLIR-based machine learning compiler and runtime toolkit.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
NuGet
scriban/scriban
A fast, powerful, safe and lightweight scripting language and engine for .NET
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
crates.io
RustAudio/cpal
Low-level cross-platform audio I/O library in Rust
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
rejetto/hfs
HFS is a web file server for your computer. Share folders or even a single file thanks to the virtual file system.
GPL-3.0Oct 20, 2026 · metrics 2.10.0
PyPI
evalstate/fast-agent
Code, Build and Evaluate agents - excellent Model and Skills/MCP/ACP/A2A Support
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
openai/openai-agents-js
A lightweight, powerful framework for multi-agent workflows and voice agents
MITOct 22, 2026 · metrics 2.10.0
—
fatih/structs
Utilities for Go structs
MITOct 21, 2026 · metrics 2.10.0
npm
primer/react
An implementation of GitHub's Primer Design System using React
MITOct 20, 2026 · metrics 2.10.0
npm
gildas-lormeau/zip.js
JavaScript library to zip and unzip files supporting parallel compression, web streams, pluggable compression engines, zip64, split files, data encryption, and deflate64 decompression.
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go
xo/dbtpl
Command line tool to generate idiomatic Go code for SQL databases supporting PostgreSQL, MySQL, SQLite, Oracle, and Microsoft SQL Server
MITOct 19, 2026 · metrics 2.10.0
crates.io · npm
yvgude/lean-ctx
LeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Open-source Engine: CLI, MCP, hooks and supported proxy paths.
Apache-2.0Oct 20, 2026 · metrics 2.10.0