Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,161
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
xdg-rs/dirs
a low-level library that provides config/cache/data paths, following the respective conventions on Linux, macOS and Windows
No licenseSep 17, 2026 · metrics 2.10.0
crates.io
zmwangx/rust-ffmpeg-sys
FFmpeg bindings for Rust.
No licenseSep 17, 2026 · metrics 2.10.0
Go
znscli/zns
CLI tool for querying DNS records with readable, colored output.
MITSep 19, 2026 · metrics 2.10.0
crates.io · npm
SentryPeer/SentryPeer
Protect your SIP Servers from bad actors at https://sentrypeer.org
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
cybozu-go/cke
Cybozu Kubernetes Engine
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
duchess-rs/duchess
Silky smooth Java-Rust interop
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Maven
enonic/xp
Enonic XP
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm · PyPI
genome-spy/genome-spy
A visualization grammar and GPU-accelerated toolkit for genomic data
MITSep 19, 2026 · metrics 2.10.0
npm
gkz/type-check
a library which allows you to check the types of JavaScript values at runtime with a Haskell like type syntax
MITSep 16, 2026 · metrics 2.10.0
Packagist
langleyfoxall/laravel-nist-password-rules
🔒 Laravel validation rules that follow the password related recommendations found in NIST Special Publication 800-63B section 5.
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
lukaszraczylo/traefikoidc
Traefik OIDC plugin middleware
MITSep 17, 2026 · metrics 2.10.0
Packagist
rectorphp/swiss-knife
Swiss knife in pocket of every upgrade architect!
MITSep 18, 2026 · metrics 2.10.0
npm
rharkor/caching-for-turbo
A Github action to set up Turborepo Remote Caching to work with GitHub Actions' built-in cache instead of Vercel one
MITSep 17, 2026 · metrics 2.10.0
Packagist
BabDev/PagerfantaBundle
Integrates Pagerfanta into Symfony applications
Custom licenseSep 18, 2026 · metrics 2.10.0
NuGet
ChangemakerStudios/GotenbergSharpApiClient
.NET C# Client for the Gotenberg API
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
FriendsOfBehat/SuiteSettingsExtension
:paperclip: Allows to overwrite suites' default settings.
MITSep 16, 2026 · metrics 2.10.0
PyPI
OHF-Voice/wyoming-piper
Wyoming protocol server for Piper text to speech system
MITSep 17, 2026 · metrics 2.10.0
npm
ThatOpen/engine_fragment
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
npm
adopted-ember-addons/ember-leaflet
:fire: :leaves: Easy and declarative mapping for ember
MITSep 18, 2026 · metrics 2.10.0
Go
gosom/scrapemate
Golang Crawling and scraping framework
MITSep 15, 2026 · metrics 2.10.0
npm
jonschlinkert/word-wrap
Wrap words to a specified length.
MITSep 16, 2026 · metrics 2.10.0
PyPI
newrelic/newrelic-python-agent
New Relic Python Agent
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · PyPI
oracle/macaron
Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:
UPL-1.0Sep 18, 2026 · metrics 2.10.0
—
rpmfusion-infra/fedy
Fedy makes it easy to install third-party software in Fedora.
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
y49/tlive
Self-hosted remote approvals + live monitoring for Claude Code / Codex — via Telegram, Feishu, or a web terminal. Any subscription or API key.
MITSep 19, 2026 · metrics 2.10.0
Packagist
Galbar/JsonPath-PHP
A JsonPath implementation in PHP
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
centrifuge/go-substrate-rpc-client
Substrate RPC client for go aka GSRPC
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go · npm
elastic/terraform-provider-elasticstack
Terraform provider for Elastic Stack
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm · crates.io · Go +1
json-e/json-e
A data-structure parameterization system written for embedding context in JSON objects
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
Allyans3/steam-market-api-v2
Steam Market API v2 package
MITSep 19, 2026 · metrics 2.10.0