Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,207
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
ethereum-optimism/superchain-registry
An index of chains which serves as the source of truth for who’s in the Superchain Ecosystem
MITSep 17, 2026 · metrics 2.10.0
—
geomys/sandboxed-step
A GitHub Action that runs a command in a gVisor sandbox
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
crates.io
nickel-org/rust-mustache
mustache template library for rust
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
nyariv/SandboxJS
Safe eval runtime
MITSep 21, 2026 · metrics 2.10.0
crates.io · npm
farcasterxyz/snapchain
The open-source, canonical implementation of Farcaster's Snapchain network.
GPL-3.0Sep 20, 2026 · metrics 2.10.0
—
hynek/build-and-inspect-python-package
Build and Inspect Python Packages in GitHub Actions
MITSep 20, 2026 · metrics 2.10.0
npm
jsverse/transloco-keys-manager
🦄 The Key to a Better Translation Experience
MITSep 16, 2026 · metrics 2.10.0
crates.io
orium/cargo-rdme
Cargo command to create the README.md from your crate's documentation
MITSep 17, 2026 · metrics 2.10.0
PyPI
wwhenxuan/PySDKit
A Python library for signal decomposition algorithms.
MITSep 17, 2026 · metrics 2.10.0
Go · npm
OpenSLO/oslo
CLI tool for the OpenSLO spec
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
isaacs/once
Run a function exactly one time
BlueOak-1.0.0Sep 16, 2026 · metrics 2.10.0
—
kedacore/charts
Helm charts for KEDA
Apache-2.0Sep 21, 2026 · metrics 2.10.0
npm
postcss/postcss-calc
PostCSS plugin to reduce calc()
MITSep 16, 2026 · metrics 2.10.0
—
terem42/zfs-hetzner-vm
script to install Debian 12, 13 and Ubuntu 22, 24 LTS with ZFS root on Hetzner VPS
No licenseSep 18, 2026 · metrics 2.10.0
NuGet
tghamm/Anthropic.SDK
An unofficial C#/.NET SDK for accessing the Anthropic Claude API. This package is not affiliated with, endorsed by, or sponsored by Anthropic. Anthropic and Claude are trademarks of Anthropic, PBC.
MITSep 16, 2026 · metrics 2.10.0
PyPI
Samsung/CredSweeper
CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o
MITSep 17, 2026 · metrics 2.10.0
RubyGems
Vonage/vonage-ruby-sdk
Vonage REST API client for Ruby. API support for SMS, Voice, Text-to-Speech, Numbers, Verify (2FA) and more.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
—
alpinelinux/apk-tools
[MIRROR] Alpine package manager
GPL-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
michaelsproul/rust_radix_trie
Fast generic radix trie implemented in Rust
MITSep 18, 2026 · metrics 2.10.0
PyPI
msabramo/requests-unixsocket
Use requests to talk HTTP via a UNIX domain socket
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist · npm
statikbe/laravel-cookie-consent
The package includes a script & styling for a cookie banner and a modal where the visitor can select his/her cookie preferences.
MITSep 17, 2026 · metrics 2.10.0
npm
zendesk/radar
High level API and backend for writing web apps that use push messaging
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
aws/amazon-redshift-python-driver
Redshift Python Connector. It supports Python Database API Specification v2.0.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
imdone/imdone-atom
imdone-atom has been archived
MITSep 16, 2026 · metrics 2.10.0
crates.io
johannesPettersson80/trust-platform
truST Platform — IEC 61131‑3 Structured Text tooling suite
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
seninp/saxpy
Symbolic Aggregate approXimation, HOT-SAX, and SAX-VSM implementation in Python
GPL-2.0Sep 18, 2026 · metrics 2.10.0
npm
transitive-bullshit/random
Seedable random number generator supporting many common distributions.
MITSep 18, 2026 · metrics 2.10.0
—
HFUTTUG/HFUT_Thesis
LaTeX Thesis Template for Hefei University of Technology
LPPL-1.3cSep 19, 2026 · metrics 2.10.0
crates.io
async-rs/futures-timer
Heap-based async timers
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io · npm
baseballyama/rsvelte
Rust-powered Svelte ecosystem
MITSep 18, 2026 · metrics 2.10.0