Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,260
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
uvwt/agentdock
Secure MCP runtime for AI agents to operate local machines, servers, and containers with multi-device orchestration.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
crates.io
s-arash/ascent
Logic programming in Rust
MITSep 1, 2026 · metrics 2.10.0
crates.io
kornelski/cargo-deb
Make Debian packages directly from Rust/Cargo projects
MITSep 5, 2026 · metrics 2.10.0
NuGet
blazorblueprintui/ui
A collection of accessible, headless primitives and beautifully-designed components for Blazor inspired by shadcn/ui.
Apache-2.0Sep 4, 2026 · metrics 2.10.0
npm
d3/d3-selection
Transform the DOM by selecting elements and joining to data.
ISCAug 31, 2026 · metrics 2.10.0
Packagist · npm
usernotnull/tall-toasts
A Toast notification library for the Laravel TALL stack. You can push notifications from the backend or frontend to render customizable toasts with almost zero footprint on the published CSS/JS 🔥🚀
MITSep 5, 2026 · metrics 2.10.0
crates.io
rust-lang/ssh2-rs
Rust bindings for libssh2
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
wojtekmaj/react-daterange-picker
A date range picker for your React app.
MITSep 4, 2026 · metrics 2.10.0
npm
gethopp/figma-mcp-bridge
Figma Plugin & MCP server to bypass API limits
MITSep 5, 2026 · metrics 2.10.0
Go
abbot/go-http-auth
Basic and Digest HTTP Authentication for golang http
Apache-2.0Sep 3, 2026 · metrics 2.10.0
crates.io
paradigmxyz/solar
Blazingly fast, modular and contributor friendly Solidity compiler, written in Rust
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
emarsden/dash-mpd-cli
Download media content from a DASH-MPEG or DASH-WebM MPD manifest
MITSep 2, 2026 · metrics 2.10.0
PyPI · crates.io · npm
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
photostructure/exiftool-vendored.js
Fast, cross-platform Node.js access to ExifTool
MITSep 5, 2026 · metrics 2.10.0
RubyGems · crates.io
gjtorikian/commonmarker
Ruby wrapper for the comrak (CommonMark parser) Rust crate
MITSep 5, 2026 · metrics 2.10.0
crates.io
ClickHouse/clickhouse-rs
Official pure Rust typed client for ClickHouse DB
Apache-2.0Sep 2, 2026 · metrics 2.10.0
NuGet
Sicos1977/MSGReader
C# Outlook MSG file reader without the need for Outlook
MITSep 3, 2026 · metrics 2.10.0
npm · Maven · RubyGems
auth0/react-native-auth0
React Native toolkit for Auth0 API
MITSep 5, 2026 · metrics 2.10.0
npm
zapier/zapier-platform
The toolkit for you to build an integration on Zapier
Custom licenseSep 6, 2026 · metrics 2.10.0
PyPI
ksenxx/kiss_ai
KISS Sorcar: Keep it Simple, Stupid AI General Purpose Agent Framework for Long Horizon Tasks and AI Discovery
Custom licenseSep 6, 2026 · metrics 2.10.0
npm
loglayer/loglayer
A modern logging library for Javascript / Typescript that routes logs to various logging libraries, cloud providers, files, StatsD, and OpenTelemetry while providing a fluent API for specifying log messages, metadata and errors.
MITSep 5, 2026 · metrics 2.10.0
Packagist
nette/database
💾 A database layer with a familiar PDO-like API but much more powerful. Building queries, advanced joins, drivers for MySQL, PostgreSQL, SQLite, MS SQL Server and Oracle.
Custom licenseSep 5, 2026 · metrics 2.10.0
npm · Packagist
ProcessMaker/processmaker
ProcessMaker BPM Core
AGPL-3.0Sep 6, 2026 · metrics 2.10.0
npm · PyPI
awslabs/generative-ai-cdk-constructs
AWS Generative AI CDK Constructs are sample implementations of AWS CDK for common generative AI patterns.
Apache-2.0Sep 2, 2026 · metrics 2.10.0
crates.io
HydroniumLabs/h3o
Rust implementation of the H3 geospatial indexing system.
BSD-3-ClauseSep 2, 2026 · metrics 2.10.0
Go
kolide/launcher
Osquery launcher, autoupdater, and packager
Custom licenseSep 3, 2026 · metrics 2.10.0
PyPI
dellytools/delly
DELLY2: Structural variant discovery by integrated paired-end and split-read analysis
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
npm
koichik/node-tunnel
Node HTTP/HTTPS Agents for tunneling proxies
MITAug 31, 2026 · metrics 2.10.0
npm
keymanapp/keyman
Keyman cross platform input methods system running on Android, iOS, Linux, macOS, Windows and mobile and desktop web
Custom licenseSep 5, 2026 · metrics 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MITSep 6, 2026 · metrics 2.10.0