Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,509
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
santhreal/guise
Canonical browser fingerprint bundles, human-behavior timing, and TLS profile re-exports for the Santh fleet
Custom licenseAug 1, 2026 · metrics 2.10.0
crates.io
santhreal/guise-choice
Uniform random selection and stealth-safe token primitives for the Santh fleet
No licenseAug 1, 2026 · metrics 2.10.0
crates.io
santhreal/guise-pacing
Pure retry backoff, jitter, and Retry-After pacing primitives for the Santh fleet
No licenseAug 1, 2026 · metrics 2.10.0
crates.io
santhreal/guise-profiles
Pure browser fingerprint profile identifiers and user-agent constants for Santh stealth stacks
No licenseAug 1, 2026 · metrics 2.10.0
crates.io
santhreal/hashkit
Unified non-cryptographic hash functions
MITJul 31, 2026 · metrics 2.10.0
—
santhreal/interactsh
No repository description published.
No licenseAwaiting first inspection
—
santhreal/mctrust
No repository description published.
No licenseAwaiting first inspection
crates.io
santhreal/netforge
High-performance raw packet I/O engine with AF_XDP, sendmmsg, and pnet backends
Custom licenseAug 1, 2026 · metrics 2.10.0
crates.io
santhreal/openpack
Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.
MITJul 18, 2026 · metrics 2.10.0
—
santhreal/pocgen
No repository description published.
No licenseAwaiting first inspection
crates.io
santhreal/procjail
Process sandbox for untrusted code - Linux namespaces, firejail, bubblewrap, watchdog timeout
MITJul 31, 2026 · metrics 2.10.0
crates.io
santhreal/proxywire
Composable proxy selection and tunneling primitives for network clients
Custom licenseAug 1, 2026 · metrics 2.10.0
—
santhreal/respdiff
No repository description published.
No licenseAwaiting first inspection
crates.io
santhreal/runtime-foxdriver
Firefox browser automation via WebDriver BiDi (runtime-foxdriver)
No licenseAug 8, 2026 · metrics 2.10.0
—
santhreal/santh
No repository description published.
No licenseAwaiting first inspection
—
santhreal/scanclient
No repository description published.
No licenseAwaiting first inspection
—
santhreal/secir
No repository description published.
No licenseAwaiting first inspection
crates.io
santhreal/simdsieve
SIMD-accelerated byte pattern pre-filtering
MITJul 18, 2026 · metrics 2.10.0
crates.io
santhreal/ziftsieve
Search compressed data without full decompression
MITJul 31, 2026 · metrics 2.10.0
—
santhsecurity/Santh
No repository description published.
No licenseAwaiting first inspection
crates.io
santhsecurity/codewalk
Fast security-aware file tree walker — gitignore, binary detection, memmap2, parallel
MITJul 17, 2026 · metrics 2.10.0
crates.io
santhsecurity/openpack
Safe archive-reader for ZIP-derived formats (ZIP, CRX, JAR, APK, IPA) with BOM-safe checks.
MITJul 17, 2026 · metrics 2.10.0
—
santhsecurity/proxywire
No repository description published.
No licenseAwaiting first inspection
—
santhsecurity/respdiff
No repository description published.
No licenseAwaiting first inspection
Go
santiagovittor/scrapemate
Golang Crawling and scraping framework
MITJul 17, 2026 · metrics 2.10.0
npm
saoirse-iontach/browser-fs-core
BrowserFS is an in-browser filesystem that emulates the Node JS filesystem API and supports storing and retrieving files from various backends.
Custom licenseAug 25, 2026 · metrics 2.10.0
npm
saooti/octopus-sdk
Javascript SDK for using octopus
MITJul 20, 2026 · metrics 2.10.0
—
sapcc/logstash_exporter
Prometheus exporter for Logstash metrics
MITAug 28, 2026 · metrics 2.10.0
crates.io
sappenin/interledger-rs
(Work In Progress) Interledger implementation in Rust
No licenseAug 19, 2026 · metrics 2.10.0
PyPI
sappo/czmq
High-level C binding for ØMQ
MPL-2.0Sep 5, 2026 · metrics 2.10.0