Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,099
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
newrelic/newrelic-python-agent
New Relic Python Agent
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · PyPI
oracle/macaron
Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:
UPL-1.0Sep 18, 2026 · metrics 2.10.0
—
rpmfusion-infra/fedy
Fedy makes it easy to install third-party software in Fedora.
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
y49/tlive
Self-hosted remote approvals + live monitoring for Claude Code / Codex — via Telegram, Feishu, or a web terminal. Any subscription or API key.
MITSep 19, 2026 · metrics 2.10.0
Packagist
Galbar/JsonPath-PHP
A JsonPath implementation in PHP
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
centrifuge/go-substrate-rpc-client
Substrate RPC client for go aka GSRPC
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go · npm
elastic/terraform-provider-elasticstack
Terraform provider for Elastic Stack
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm · crates.io · Go +1
json-e/json-e
A data-structure parameterization system written for embedding context in JSON objects
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
Allyans3/steam-market-api-v2
Steam Market API v2 package
MITSep 19, 2026 · metrics 2.10.0
PyPI
flux-framework/flux-core
core services for the Flux resource management framework
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
RubyGems
hanami/hanami-validations
Validation mixin for Ruby objects
MITSep 19, 2026 · metrics 2.10.0
Go
pingcap/go-tpc
A toolbox to benchmark TPC workloads in Go
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
yjs/y-codemirror.next
Collaborative extensions for CodeMirror6
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
FradSer/mcp-server-apple-events
MCP server providing native macOS integration with Apple Reminders and Calendar via EventKit
MITSep 18, 2026 · metrics 2.10.0
—
NewFuture/NKThesis
南开大学硕士毕业论文/博士论文模板 (Latex Template for Nankai University)
MITSep 19, 2026 · metrics 2.10.0
—
ScalefreeCOM/datavault4dbt
Scalefree's dbt package for a Data Vault 2 implementation congruent to the original Data Vault 2 definition by Dan Linstedt including the Staging Area, DV2 main entities, PITs and Snapshot Tables.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · npm
SourcewareLab/Toney
Toney is a fast, lightweight, terminal-based note-taking app for the modern developer.
MITSep 17, 2026 · metrics 2.10.0
npm
biggora/device-uuid
Fast browser device uuid generation library. Written in pure JavaScript, no dependencies.
MITSep 18, 2026 · metrics 2.10.0
Go · npm
ciliverse/cilikube
Multi-cluster Kubernetes admin: nodes, workloads, topology, and a React + Go console. Learn k8s, helm, and cluster ops.
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Go · npm
dmarcguardhq/parse-dmarc
DMARC aggregate report parser with a built-in dashboard. One Go binary, IMAP in, SQLite, Prometheus metrics, MCP server. Apache-2.0.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io · npm
dwallet-labs/ika
Ika is the fastest zero-trust MPC network. Its 2PC-MPC protocol powers dWallets: programmable signing mechanisms that let smart contracts natively control assets on any chain (Bitcoin, Ethereum, Solana, and more) with no bridging or wrapping. Live beta on Sui; pre-alpha for builders on Solana.
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
instantlyeasy/claude-code-sdk-ts
Fluent, chainable TypeScript SDK: configure models, enable tools, stream events, then fetch text, JSON, run details or token stats in one call via .asText() or .allowTools('Read', 'Write'). Multi-level logging plus live onMessage/onToolUse callbacks give deep, CLI-compatible observability.
MITSep 18, 2026 · metrics 2.10.0
Go · npm
kOlapsis/ackify
🔏 Proof of Read. Compliance made simple.
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
RubyGems
test-kitchen/kitchen-dokken
Test Kitchen driver/provisioner for lightning faster Chef Infra cookbook testing with Docker
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
NativeScript/plugins
@nativescript plugins to help with your developments.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · crates.io · npm
NibiruChain/nibiru
The breakthrough smart contract platform ushering in the next era of money. Nibiru powers an ecosystem of dApps including perps, RWAs, and more.
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
chanzuckerberg/miniwdl
Workflow Description Language developer tools & local runner
MITSep 19, 2026 · metrics 2.10.0
RubyGems
mapbox/mapbox-directions-swift
Traffic-aware directions and map matching in Swift on iOS, macOS, tvOS, watchOS, and Linux
ISCSep 18, 2026 · metrics 2.10.0
crates.io
nabijaczleweli/rust-embed-resource
A Cargo build script library to handle compilation and inclusion of Windows resources, in the most resilient fashion imaginable
MITSep 18, 2026 · metrics 2.10.0
Go
pgsty/pig
PostgreSQL Extension Package Manager
Apache-2.0Sep 20, 2026 · metrics 2.10.0