Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,504
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
592B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
fireflyframework/fireflyframework-parent
Parent POM for the Firefly Framework — dependency, plugin & build management for Spring Boot 3.x reactive microservices
No licenseSep 13, 2026 · metrics 2.10.0
—
fireflyprotocol/ember-sdk
No repository description published.
No licenseAwaiting first inspection
—
fireflyprotocol/library-sui
No repository description published.
No licenseAwaiting first inspection
Go
firstprinciples/goa-ai
Design-first agentic systems in Go: declare agents, tools, MCP servers, policies, and structured model output in Goa, then generate the durable runtime.
MITSep 10, 2026 · metrics 2.10.0
npm
fishkabio/seqalgo
Sequence algorithms for bioinformatics
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
fishkabio/seqio
Sequencing file parsers and writers for bioinformatics data
Apache-2.0Jul 30, 2026 · metrics 2.10.0
Packagist
fissible/attest
Tamper-evident signed evidence chains for application events. Optional OpenTimestamps anchoring.
MITAug 19, 2026 · metrics 2.10.0
Packagist
fissible/attest-laravel
Laravel adapter for fissible/attest: Eloquent storage, console commands, scheduled anchoring.
MITAug 13, 2026 · metrics 2.10.0
Go
fivetwenty-io/capi
CLoud Foundry API (CAPI) Go Client
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
fivetwenty-io/proxmox-apiclient-go
Proxmox PVE API Client for Go
No licenseJul 30, 2026 · metrics 2.10.0
—
fixedassetv2-fe/tsv2-library
No repository description published.
No licenseAwaiting first inspection
Go
fj1981/infrakit
This project is a Golang-based application leveraging the Infrakit framework, which is designed to simplify infrastructure management and orchestration. It integrates the Gin web framework to handle HTTP requests efficiently and provides a robust API interface. The project also includes database operations, utilizing a well-structured database
MITAug 13, 2026 · metrics 2.10.0
Go
fjacquet/idrac_exporter
Simple Redfish exporter for Prometheus
MITSep 6, 2026 · metrics 2.10.0
Go
fjacquet/licenses-exporter-core
Vendor-neutral engine for the licenses_exporter family (license_ schema, snapshot store, dual export, hot reload) — imported by per-vendor exporters
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
fjacquet/pflex_exporter
Prometheus + OTLP exporter for Dell PowerFlex Gen1 clusters (Go)
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
fjacquet/pmax_exporter
Prometheus + OTLP exporter for Dell PowerMax (Unisphere REST API)
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
fjacquet/pstore_exporter
Dell PowerStore Prometheus + OTLP exporter (snapshot model, bulk + per-entity auto-detected paths, Grafana dashboards, docker-compose)
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
fjacquet/vmware_licenses_exporter
VMware vSphere license exporter (Prometheus + OTLP) — licenses_exporter family, built on licenses-exporter-core
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
fjogeleit/goth
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
MITSep 13, 2026 · metrics 2.10.0
Go
fkautz/trace-check
Config-driven, multi-language requirements traceability checker
MITSep 5, 2026 · metrics 2.10.0
Go
flaboy/agentloop
Generic agent loop library for shellman
No licenseSep 10, 2026 · metrics 2.10.0
Go · npm
flakerimi/harness
Multi-provider agent harness / personal+business assistant in Go (pluggable identities, skills, sub-agents; HTTP API; Telegram + Vue web clients)
MITJul 29, 2026 · metrics 2.10.0
npm
flaketrace/playwright-ai-triage
AI-powered failure triage reporter for Playwright — classifies test failures (real bug / flaky / selector drift / env issue) and posts the verdicts to your PR
MITJul 30, 2026 · metrics 2.10.0
Go
flamingoosesoftwareinc/fsift
Filesystem listing and filtering for Go
MPL-2.0Sep 6, 2026 · metrics 2.10.0
Go
flamingoosesoftwareinc/pungi
Reusable config command for viper-backed cobra CLIs
MPL-2.0Sep 6, 2026 · metrics 2.10.0
Go
flamingoosesoftwareinc/slogerr
slog attributes attached to errors
MPL-2.0Sep 6, 2026 · metrics 2.10.0
Go
flamingoosesoftwareinc/uda
Universal dependency analyzer
MPL-2.0Sep 6, 2026 · metrics 2.10.0
Go
flamingoosesoftwareinc/xdg
XDG base directory paths for Go
MPL-2.0Sep 6, 2026 · metrics 2.10.0
Go · npm
flanksource/captain
No repository description published.
No licenseAug 1, 2026 · metrics 2.10.0
Go
flanksource/clicky
No repository description published.
Apache-2.0Sep 5, 2026 · metrics 2.10.0