Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,571
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
NullHypothesis/exitmap
A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at https://gitlab.torproject.org/tpo/network-health/exitmap
GPL-3.0Sep 20, 2026 · metrics 2.10.0
Go
libdns/libdns
Core interfaces for universal DNS record manipulation across providers
MITSep 23, 2026 · metrics 2.10.0
NuGet
OutSystems/CefGlue
.NET binding for The Chromium Embedded Framework (CEF)
MITSep 22, 2026 · metrics 2.10.0
—
lexus2k/lcdgfx
Driver for LCD displays running on Arduino/Avr/ESP32/Linux (including Rasperry) platforms
MITSep 21, 2026 · metrics 2.10.0
Go
ChainSafe/gossamer
🕸️ Go Implementation of the Polkadot Host
LGPL-3.0Sep 21, 2026 · metrics 2.10.0
PyPI
ajinabraham/njsscan
njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.
LGPL-3.0Sep 21, 2026 · metrics 2.10.0
—
docker/scout-cli
Docker Scout CLI
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
facebookincubator/infima
A UI framework that provides websites with the minimal CSS and JS needed to get started with building a modern responsive beautiful website
MITSep 23, 2026 · metrics 2.10.0
Go
gittower/git-flow-next
A modern reimplementation of git-flow in Go that offers greater flexibility while maintaining backward compatibility with the original git-flow and git-flow-avh.
Custom licenseSep 23, 2026 · metrics 2.10.0
npm
asyncapi/modelina
A library for generating typed models based on inputs such as AsyncAPI, OpenAPI, and JSON Schema documents with high customization
Apache-2.0Sep 25, 2026 · metrics 2.10.0
Go
cosmos/iavl
Merkleized IAVL+ Tree implementation in Go
Apache-2.0Sep 23, 2026 · metrics 2.10.0
PyPI
glotzerlab/hoomd-blue
Molecular dynamics and Monte Carlo soft matter simulation on GPUs.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go
OneOfOne/xxhash
A native implementation of the excellent XXHash hashing algorithm.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Maven
forrestguice/SuntimesWidget
Android app (and widget collection) that displays sunlight and moonlight times.
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
microprediction/timemachines
Temporal online machines: streaming anomaly detection with calibrated p-values, built on skaters
MITSep 21, 2026 · metrics 2.10.0
PyPI
dymmond/edgy
The perfect ORM to work with complex databases
BSD-3-ClauseSep 26, 2026 · metrics 2.10.0
npm · crates.io
code-yeongyu/senpi
pi had nothing (nothing), so I made something (something) — sorry mariozechner-senpai, I went ahead and lovingly soiled your pure pi for you. opinionated fork of badlogic/pi-mono with extension-first additions. ganbare ganbare senpi 頑張れ頑張れ先輩
MITSep 21, 2026 · metrics 2.10.0
Go
cli/go-gh
A Go module for interacting with gh and the GitHub API from the command line.
MITSep 23, 2026 · metrics 2.10.0
Maven
mapbox/mapbox-java
The Mapbox Java SDK – Java wrappers around Mapbox APIs and other location data
MITSep 20, 2026 · metrics 2.10.0
npm
tomyud1/godot-mcp
MCP Server and Godot Plugin for AI-assisted game development
MITSep 24, 2026 · metrics 2.10.0
—
DCS-Skunkworks/dcs-bios
Data export tool for DCS.
GPL-3.0Sep 20, 2026 · metrics 2.10.0
—
viticci/remctl
An Apple Reminders CLI for power users and AI agents. RemCTL supports all the latest Reminders features such as sections, subtasks, tags, rich links, groceries lists, templates, smart lists, and image attachments. (Not affiliated with Apple.)
MITSep 20, 2026 · metrics 2.10.0
Go
ClickHouse/ch-go
Low-level Go Client for ClickHouse
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
huandu/skiplist
Fast and easy-to-use skip list for Go.
MITSep 23, 2026 · metrics 2.10.0
npm
Urthen/case-sensitive-paths-webpack-plugin
Enforces case sensitive paths in Webpack requires.
MITSep 23, 2026 · metrics 2.10.0
PyPI · npm · Go
JeanExtreme002/FlightRadarAPI
:airplane: Unofficial SDK for FlightRadar24 for Python 3, NodeJS and Golang.
MITSep 26, 2026 · metrics 2.10.0
Go
go-chi/cors
CORS net/http middleware for Go
MITSep 23, 2026 · metrics 2.10.0
npm
remarkjs/remark-directive
remark plugin to support directives
MITSep 23, 2026 · metrics 2.10.0
Go
mackerelio/go-osstat
OS system statistics library for Go
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
jmhodges/levigo
levigo is a Go wrapper for LevelDB
MITSep 23, 2026 · metrics 2.10.0