Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,499
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
safdar-azeem/vue-ssr-lite
No repository description published.
No licenseJul 27, 2026 · metrics 2.10.0
Go
safetylab/ShadowSecurityScanner
Free, open-source network vulnerability scanner & penetration testing tool that ranks findings by real-world exploitability (EPSS + CISA KEV). Single desktop app for Windows, macOS, Linux. No cloud, no telemetry. MIT.
MITJul 21, 2026 · metrics 2.10.0
Go
sagansystems/terraform-provider-snowflake
Terraform provider for managing Snowflake accounts
MITAug 17, 2026 · metrics 2.10.0
npm
sagar1596/vesture
No repository description published.
MITJul 26, 2026 · metrics 2.10.0
Go
sagarsinghdev/coherent
A local, in-process cache for Go that stays coherent across a fleet of processes via real-time invalidation.
Apache-2.0Aug 3, 2026 · metrics 2.10.0
Go
sago35/bluetooth
Cross-platform Bluetooth API for Go and TinyGo. Supports Linux, macOS, Windows, and bare metal using Nordic SoftDevice.
Custom licenseSep 6, 2026 · metrics 2.10.0
Go
sahmadiut/half-tunnel
No repository description published.
No licenseAug 23, 2026 · metrics 2.10.0
—
sahu-uhas/sahu-fca
No repository description published.
No licenseAwaiting first inspection
Go
saidmashhud/mashgate-public
No repository description published.
Custom licenseJul 23, 2026 · metrics 2.10.0
—
sailresearchco/sail
No repository description published.
No licenseAwaiting first inspection
npm
saimeda32/looprail
Multi-provider coding-agent orchestration in a verified loop: a critic on a different model signs off before work ships. Claude Code, Codex, Gemini, aider, Copilot, opencode, local.
MITJul 21, 2026 · metrics 2.10.0
npm · Maven
sairam0424/Tombstone
Production intelligence layer for feature flags at scale — blast radius gating, circuit-breaker auto-rollback, Merkle-linked audit log, incident correlation, and Knight Capital–style tombstoning. Go + Python + TypeScript polyglot monorepo.
No licenseJul 27, 2026 · metrics 2.10.0
Go
sairintechnologycom/pkgsafe
Supply-chain firewall for AI coding agents and developers — checks npm/PyPI packages against OSV advisories, typosquat & lifecycle-script heuristics, and your policy before install. Local-first, MCP-native.
MITSep 8, 2026 · metrics 2.10.0
—
saitoutoshihide/rgl.cry
Combined Use Cases of R Packages rgl and cry
GPL-2.0Jul 17, 2026 · metrics 2.10.0
Go
sajayantony/distribution
The toolkit to pack, ship, store, and deliver container content
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go · npm
sajjadth/trivia-quest
Trivia Quest is a full-stack app offering a diverse range of trivia categories, real-time multiplayer challenges, and a responsive design. Test your knowledge, compete globally, and track your progress on leaderboards.
MITJul 17, 2026 · metrics 2.10.0
Go · npm
saker-ai/filehub
No repository description published.
MITJul 18, 2026 · metrics 2.10.0
Go
sakuya1998/aws-cost-exporter
No repository description published.
Apache-2.0Jul 18, 2026 · metrics 2.10.0
—
salemove/elixir-http_client
No repository description published.
No licenseAwaiting first inspection
—
salemove/logstash_logger_formatter
No repository description published.
No licenseAwaiting first inspection
—
salemove/opentelemetry_logger_metadata
No repository description published.
No licenseAwaiting first inspection
—
salesforce-experience-platform-emu/luvio-next
No repository description published.
No licenseAwaiting first inspection
—
salesforce-experience-platform-emu/lwr
No repository description published.
No licenseAwaiting first inspection
—
salesforce-experience-platform-emu/onestore
No repository description published.
No licenseAwaiting first inspection
npm
salesforcecli/source-testkit
No repository description published.
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
—
saltpay/teya-terminal-application
No repository description published.
No licenseAwaiting first inspection
—
salute-developers/pashka
No repository description published.
No licenseAwaiting first inspection
Go
saman-jafari/correlation-id-traefik
No repository description published.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
samarth70/k6
A modern load testing tool, using Go and JavaScript
AGPL-3.0Aug 11, 2026 · metrics 2.10.0
Go
sambly/exchangeService
No repository description published.
No licenseJul 17, 2026 · metrics 2.10.0