Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
71,238
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
619B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
Proveder/structs
Utilities for Go structs
MITSep 14, 2026 · metrics 2.10.0
npm
Prumo-Holdings/eu-tax-id-validator
Validate European tax IDs (VAT, NIF, CIF) with checksum verification. 30 countries. Zero dependencies.
MITSep 8, 2026 · metrics 2.10.0
—
Pulmonary-Institute/moxie-intl
No repository description published.
No licenseAwaiting first inspection
PyPI
PursuitOfDataScience/slurmwatch
Live per-process CPU / memory / GPU telemetry for a running Slurm job — see whether you're actually using what you requested.
MITSep 11, 2026 · metrics 2.10.0
Go
PushFlo/pushflo-go
PushFlo SDK for GO
MITSep 10, 2026 · metrics 2.10.0
Go
PushtoProdAI/prod-plugin-sdk
The Go SDK for building prod provider plugins — implement Provider, call Serve. Lean (only depends on hashicorp/go-plugin).
MITSep 5, 2026 · metrics 2.10.0
Go
Pushwoosh/parallel
Simple primitives for concurrent code execution
MITSep 14, 2026 · metrics 2.10.0
—
PxG-Studio/Lapaki
🏥 Audit-ready healthcare data architecture framework — HIPAA, COBIT 2019, NIST SP 800-53, ISO 27001. Generic, PHI-free, shareable. 10/10 compliance score.
Custom licenseAug 4, 2026 · metrics 2.10.0
NuGet
PxTools/PCAxis.Query
Handles saved queries
Apache-2.0Sep 15, 2026 · metrics 2.10.0
—
Pxs-Corporate/design-system
No repository description published.
No licenseAwaiting first inspection
Go
PyYoshi/go-clamav
No repository description published.
MITAug 19, 2026 · metrics 2.10.0
npm
Pyraxi/gantt
No repository description published.
Custom licenseSep 10, 2026 · metrics 2.10.0
npm
PyrkinValentin/cora-ui
Next-generation, high-performance React UI component kit engineered for modern interfaces.
MITSep 11, 2026 · metrics 2.10.0
Go
QBitFlow/qbitflow-go-sdk
Official Go SDK for QBitFlow - Next Generation Crypto Payment Processing
Custom licenseSep 14, 2026 · metrics 2.10.0
PyPI
QJTrader/qjtrader-python
No repository description published.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
QUNETOL57/go-automacon-course
https://automacon.ispringlearn.ru/content/info/1648
No licenseSep 14, 2026 · metrics 2.10.0
Go
QaamGo/api2convert-cli
The official command-line client for api2convert.com
MITAug 22, 2026 · metrics 2.10.0
Go
QaamGo/api2convert-go
The official Go SDK from api2convert.com
MITAug 22, 2026 · metrics 2.10.0
npm
Qjuh/discord-api-types
Up to date Discord API Typings, versioned by the API version
MITSep 14, 2026 · metrics 2.10.0
crates.io
Qlever-LLC/trellis
Core Trellis services
No licenseSep 5, 2026 · metrics 2.10.0
Go
Qlustra/conduit
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
QuanuX/Symphony
Symphony is the flagship offering from QuanuX. A fully open source operating system designed for autonomous quantitative trading, research, and infrastructure. Architected as a the first Vector-Graph-Application "VGA", Agent-first, humans welcome. Symphony launch target is September 2026.
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
Go
Quattio/slackdump
Save or export your private and public Slack messages, threads, files, and users locally without admin privileges.
AGPL-3.0Sep 10, 2026 · metrics 2.10.0
—
Quenty/Nevermore
No repository description published.
No licenseAwaiting first inspection
Go
Query-farm/vgi-cve
CVE/NVD lookup with offline CVSS scoring in DuckDB (Go)
MITAug 5, 2026 · metrics 2.10.0
Go
Query-farm/vgi-feed
Parse RSS/Atom/JSON feeds into rows in DuckDB (Go, gofeed)
MITAug 2, 2026 · metrics 2.10.0
PyPI
Query-farm/vgi-lint-check
Lint the documentation & metadata quality of VGI (Vector Gateway Interface) data workers — descriptions, column comments, tags, and example queries — with a quality score, per-version baselines, and agent-friendly output.
Custom licenseSep 11, 2026 · metrics 2.10.0
—
Query-farm/vgi-rust
No repository description published.
No licenseAwaiting first inspection
npm
Query-farm/vgi-typescript
TypeScript SDK for the VGI (Vector Gateway Interface) protocol — host DuckDB scalar, table, aggregate, and table-in-out functions in an external worker over Arrow IPC.
Custom licenseAug 2, 2026 · metrics 2.10.0
—
Quesmed/quesmed_types
No repository description published.
No licenseAwaiting first inspection