Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,167
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
ThatOpen/engine_fragment
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
npm
adopted-ember-addons/ember-leaflet
:fire: :leaves: Easy and declarative mapping for ember
MITSep 18, 2026 · metrics 2.10.0
Go
gosom/scrapemate
Golang Crawling and scraping framework
MITSep 15, 2026 · metrics 2.10.0
npm
jonschlinkert/word-wrap
Wrap words to a specified length.
MITSep 16, 2026 · metrics 2.10.0
PyPI
newrelic/newrelic-python-agent
New Relic Python Agent
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · PyPI
oracle/macaron
Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:
UPL-1.0Sep 18, 2026 · metrics 2.10.0
—
rpmfusion-infra/fedy
Fedy makes it easy to install third-party software in Fedora.
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
y49/tlive
Self-hosted remote approvals + live monitoring for Claude Code / Codex — via Telegram, Feishu, or a web terminal. Any subscription or API key.
MITSep 19, 2026 · metrics 2.10.0
Packagist
Galbar/JsonPath-PHP
A JsonPath implementation in PHP
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
centrifuge/go-substrate-rpc-client
Substrate RPC client for go aka GSRPC
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go · npm
elastic/terraform-provider-elasticstack
Terraform provider for Elastic Stack
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm · crates.io · Go +1
json-e/json-e
A data-structure parameterization system written for embedding context in JSON objects
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
Allyans3/steam-market-api-v2
Steam Market API v2 package
MITSep 19, 2026 · metrics 2.10.0
npm
d3/d3-axis
Human-readable reference marks for scales.
ISCSep 16, 2026 · metrics 2.10.0
PyPI
flux-framework/flux-core
core services for the Flux resource management framework
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
RubyGems
hanami/hanami-validations
Validation mixin for Ruby objects
MITSep 19, 2026 · metrics 2.10.0
Go
pingcap/go-tpc
A toolbox to benchmark TPC workloads in Go
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · PyPI · npm
stjude-rust-labs/sprocket
A bioinformatics workflow engine built on top of the Workflow Description Language (WDL).
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
tommy-muehle/go-mnd
Magic number detector for Go.
MITSep 16, 2026 · metrics 2.10.0
NuGet
vla/BloomFilter.NetCore
A bloom filter implementation
MITSep 16, 2026 · metrics 2.10.0
npm
yjs/y-codemirror.next
Collaborative extensions for CodeMirror6
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
FradSer/mcp-server-apple-events
MCP server providing native macOS integration with Apple Reminders and Calendar via EventKit
MITSep 18, 2026 · metrics 2.10.0
—
NewFuture/NKThesis
南开大学硕士毕业论文/博士论文模板 (Latex Template for Nankai University)
MITSep 19, 2026 · metrics 2.10.0
—
ScalefreeCOM/datavault4dbt
Scalefree's dbt package for a Data Vault 2 implementation congruent to the original Data Vault 2 definition by Dan Linstedt including the Staging Area, DV2 main entities, PITs and Snapshot Tables.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · npm
SourcewareLab/Toney
Toney is a fast, lightweight, terminal-based note-taking app for the modern developer.
MITSep 17, 2026 · metrics 2.10.0
npm
biggora/device-uuid
Fast browser device uuid generation library. Written in pure JavaScript, no dependencies.
MITSep 18, 2026 · metrics 2.10.0
Go · npm
ciliverse/cilikube
Multi-cluster Kubernetes admin: nodes, workloads, topology, and a React + Go console. Learn k8s, helm, and cluster ops.
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Go · npm
dmarcguardhq/parse-dmarc
DMARC aggregate report parser with a built-in dashboard. One Go binary, IMAP in, SQLite, Prometheus metrics, MCP server. Apache-2.0.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io · npm
dwallet-labs/ika
Ika is the fastest zero-trust MPC network. Its 2PC-MPC protocol powers dWallets: programmable signing mechanisms that let smart contracts natively control assets on any chain (Bitcoin, Ethereum, Solana, and more) with no bridging or wrapping. Live beta on Sui; pre-alpha for builders on Solana.
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
instantlyeasy/claude-code-sdk-ts
Fluent, chainable TypeScript SDK: configure models, enable tools, stream events, then fetch text, JSON, run details or token stats in one call via .asText() or .allowTools('Read', 'Write'). Multi-level logging plus live onMessage/onToolUse callbacks give deep, CLI-compatible observability.
MITSep 18, 2026 · metrics 2.10.0