Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,174
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
briansmith/untrusted
Safe, fast, zero-panic, zero-crashing, zero-allocation parsing of untrusted inputs in Rust.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
cebor/angular-highcharts
Highcharts directive for Angular
MITSep 15, 2026 · metrics 2.10.0
PyPI
felix-hilden/tekore
Spotify Web API client for Python 3
MITSep 19, 2026 · metrics 2.10.0
npm
quasarframework/quasar-ui-qmediaplayer
QMediaPlayer for Quasar
MITSep 18, 2026 · metrics 2.10.0
crates.io
smol-rs/async-process
Async interface for working with processes
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
tigera/operator
Kubernetes operator for installing Calico and Calico Enterprise
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm · PyPI
Esri/lerc
Limited Error Raster Compression
Apache-2.0Sep 16, 2026 · metrics 2.10.0
NuGet
FabriBertani/Plugin.Maui.ScreenSecurity
Safeguard your .NET MAUI app effortlessly by preventing content exposure, screenshots, and recordings with ease.
MITSep 16, 2026 · metrics 2.10.0
crates.io
MinishLab/model2vec-rs
Official Rust Implementation of Model2Vec
MITSep 21, 2026 · metrics 2.10.0
Packagist
Sopamo/laravel-filepond
Laravel backend module for filepond uploads
MITSep 17, 2026 · metrics 2.10.0
Go
ctreminiom/go-atlassian
✨ Golang Client Library for Atlassian Cloud.
MITSep 17, 2026 · metrics 2.10.0
PyPI
lebedov/msgpack-numpy
Serialize numpy arrays using msgpack
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
oli-obk/cargo_metadata
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
Go
segmentio/stats
Go package for abstracting stats collection
MITSep 19, 2026 · metrics 2.10.0
Go · npm
simpleiot/simpleiot
Simple IoT cloud/edge application/framework
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
toitlang/jaguar
Use live reloading over WiFI to turbo-charge developing for your ESP32.
MITSep 19, 2026 · metrics 2.10.0
—
wbx-github/uclibc-ng
Embedded C Library (mirror)
LGPL-2.1Sep 19, 2026 · metrics 2.10.0
Packagist
TheDoctor0/laravel-factory-generator
Model factory generator for Laravel
MITSep 17, 2026 · metrics 2.10.0
PyPI
google-deepmind/jmp
JMP is a Mixed Precision library for JAX.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
postcss/postcss-selector-parser
A CSS selector parser, integrates with postcss but does not require it.
MITSep 16, 2026 · metrics 2.10.0
crates.io · Go
succinctlabs/op-succinct
Succinct's Production-Grade Proving Engine for the OP Stack.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems · npm · PyPI
theforeman/foreman_ansible
:arrow_forward: Ansible integration in Foreman
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
LyleMi/ja3proxy
Customizing TLS (JA3) Fingerprints through HTTP Proxy
MITSep 17, 2026 · metrics 2.10.0
crates.io
assert-rs/predicates-rs
Boolean-valued predicate functions in Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
barricklab/breseq
breseq is a computational pipeline for finding mutations relative to a reference sequence using high-throughput DNA resequencing data. It is intended for haploid microbial genomes (<20 Mb). breseq is a command line tool implemented in C++.
GPL-2.0Sep 20, 2026 · metrics 2.10.0
npm
filestack/filestack-js
Official Javascript SDK for the Filestack API and content ingestion system.
MITSep 19, 2026 · metrics 2.10.0
Go
git-pkgs/proxy
A lightweight caching proxy for package registries.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
hedhyw/rex
Flexible regular expressions constructor for Golang.
MITSep 19, 2026 · metrics 2.10.0
npm
juanjoDiaz/streamparser-json
Streaming JSON parser in Javascript for Node.js and the browser
MITSep 20, 2026 · metrics 2.10.0
npm
octokit/action.js
GitHub API client for GitHub Actions
MITSep 16, 2026 · metrics 2.10.0