Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,510
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
592B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
goller/telegraf
The plugin-driven server agent for collecting & reporting metrics.
MITJul 26, 2026 · metrics 2.10.0
Go
goloop/app
A small lifecycle kernel for Go services: ordered start, signal-aware wait, graceful shutdown - standard library only.
MITSep 10, 2026 · metrics 2.10.0
Go
goloop/argon2id
Memory-hard Argon2id password hashing for Go (RFC 9106) - standard library only, zero dependencies.
MITAug 22, 2026 · metrics 2.10.0
Go
goloop/auth
Authentication primitives for Go: password hashing, access tokens, bearer middleware and refresh-token rotation.
MITSep 10, 2026 · metrics 2.10.0
Go
goloop/jwt
Compact JSON Web Tokens for Go, deliberately limited to HS256 - standard library only.
MITSep 5, 2026 · metrics 2.10.0
Go
goloop/mail
Build and send RFC 5322/MIME email over SMTP, with drop-in dev and test transports - standard library only.
MITSep 10, 2026 · metrics 2.10.0
Go
goloop/middlewares
Production-ready net/http middleware for Go: request ID, real IP, panic recovery, logging, timeout, compression, throttling, CORS and security headers.
MITAug 22, 2026 · metrics 2.10.0
Go
goloop/mistral
Go client for the Mistral API on the goloop/ai interface
MITJul 31, 2026 · metrics 2.10.0
Go
goloop/mux
A small, predictable routing layer over net/http.ServeMux: method helpers, prefix groups, middleware chains and an error-returning handler.
MITSep 10, 2026 · metrics 2.10.0
Go
golovanov-dev/traceloom-go
Go implementation of Traceloom: JSONL event timelines grouped by trace_id. Thread-safe API with functional options, kernel file locks (flock / LockFileEx) with no staleness heuristics, crash-consistent shards, secret masking, payload budgets. Zero dependencies.
MITSep 8, 2026 · metrics 2.10.0
npm
golproductions/check
The anti-hallucination layer for AI agents.
Custom licenseSep 5, 2026 · metrics 2.10.0
Go
gomatic/cirql
A JSON pipeline/query language: Parse compiles a query string into a Pipeline that runs over a decoded JSON value
MITJul 17, 2026 · metrics 2.10.0
Go
gomatic/go-app
urfave/cli/v3 application framework and run harness for gomatic CLIs
MITJul 18, 2026 · metrics 2.10.0
Go
gomatic/go-archive
Stream-oriented tar.gz archiving (create/list/extract) with zip-slip protection — stdlib-only
MITAug 27, 2026 · metrics 2.10.0
Go
gomatic/go-clock
Injectable time source: Clock interface, System (UTC), Fake for tests
No licenseJul 20, 2026 · metrics 2.10.0
Go
gomatic/go-cry
SSH-keyed age stream encryption: Encrypt/Decrypt/ParseIdentities
MITJul 21, 2026 · metrics 2.10.0
Go
gomatic/go-depgraph
Dependency-free generic topological sort for Go
MITJul 20, 2026 · metrics 2.10.0
Go
gomatic/go-domainsec
Sender-domain SPF/DKIM/DMARC assessment with a gateable security floor
No licenseJul 20, 2026 · metrics 2.10.0
Go
gomatic/go-envelope
Envelope (hybrid) encryption and signing: AES-GCM per-message keys wrapped to RSA, ed25519 signatures, Argon2id key bundles
No licenseJul 20, 2026 · metrics 2.10.0
Go
gomatic/go-error
Constant/sentinel error helper for Go: errs.Const is a string newtype implementing error, with a %w-wrapping .With() that stays matchable via errors.Is
MITJul 20, 2026 · metrics 2.10.0
Go
gomatic/go-ghkeys
Fetch a GitHub user's SSH public keys as age recipients
MITAug 27, 2026 · metrics 2.10.0
Go
gomatic/go-git
Git repository facts for Go behind an injected runner
MITAug 27, 2026 · metrics 2.10.0
Go
gomatic/go-httpserver
Minimal, stdlib-only HTTP server lifecycle wrapper with context-driven graceful shutdown
MITJul 24, 2026 · metrics 2.10.0
Go
gomatic/go-json
Dynamic, JSON-compatible value model with typed constant-error accessors
MITJul 14, 2026 · metrics 2.10.0
Go
gomatic/go-lines
Line-oriented text processing for Go: pure per-line primitives plus a streaming, context-aware line Processor.
MITJul 14, 2026 · metrics 2.10.0
Go
gomatic/go-log
Thin log/slog configuration layer: flag-bindable Level and Format value types producing a *slog.Logger
MITJul 17, 2026 · metrics 2.10.0
Go
gomatic/go-module
Parse a git remote URL into a Go module Path, Name, Identifier, and EnvPrefix — pure string logic, no I/O
MITJul 27, 2026 · metrics 2.10.0
Go
gomatic/go-optional
Generic functional-options implementation for type-safe, friendly Go constructor APIs
MITJul 27, 2026 · metrics 2.10.0
Go
gomatic/go-output
Encode any value to an io.Writer as JSON or YAML through a small format registry, with an ErrUnsupportedFormat sentinel
MITJul 20, 2026 · metrics 2.10.0
Go
gomatic/go-pgpool
Tuned pgx v5 connection pools + health checker (libpq env fallback)
No licenseJul 20, 2026 · metrics 2.10.0