Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,133
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm · Go · Maven +1
hyperledger/fabric-gateway
Go, Node and Java client API for Hyperledger Fabric v2.4+
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
zephir-lang/php-zephir-parser
The Zephir Parser delivered as a C extension for the PHP language.
MITSep 17, 2026 · metrics 2.10.0
PyPI
AI-Hypercomputer/xpk
xpk (Accelerated Processing Kit, pronounced x-p-k,) is a software tool to help Cloud developers to orchestrate training jobs on accelerators such as TPUs and GPUs on GKE.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
FredKSchott/rollup-plugin-polyfill-node
A modern Node.js polyfill for your Rollup bundle.
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
Weaverse/weaverse
Open-source SDKs / toolkit for seamless integration and development of Shopify Hydrogen themes and headless commerce solutions.
MITSep 18, 2026 · metrics 2.10.0
—
baldimario/cq
cq - High-Performance SQL Query Engine for CSV Files
MITSep 19, 2026 · metrics 2.10.0
—
bgreenwell/vip
Variable Importance Plots (VIPs)
No licenseSep 19, 2026 · metrics 2.10.0
npm
cipchk/ngx-countdown
Simple, easy and performance countdown for angular
MITSep 18, 2026 · metrics 2.10.0
—
eProsima/Fast-CDR
eProsima FastCDR library provides two serialization mechanisms. One is the standard CDR serialization mechanism, while the other is a faster implementation of it. Looking for commercial support? Contact info@eprosima.com
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
gentoo90/winreg-rs
Rust bindings to MS Windows Registry API
MITSep 17, 2026 · metrics 2.10.0
—
goreleaser/goreleaser-cross
Docker image for Golang cross-compiling with CGO
MITSep 19, 2026 · metrics 2.10.0
Packagist
kra8/laravel-snowflake
This Laravel package to generate 64 bit identifier like the snowflake within Twitter.
MITSep 17, 2026 · metrics 2.10.0
PyPI
mahdin75/gis-mcp
A Model Context Protocol (MCP) server implementation that connects Large Language Models (LLMs) to GIS operations using GIS libraries, enabling AI assistants to perform geospatial operations and transformations.
MITSep 20, 2026 · metrics 2.10.0
—
meta-quest/agentic-tools
Agent Skills for Meta Quest/Horizon OS VR Development
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
publiccodeyml/publiccode.yml
A metadata standard for public software
CC0-1.0Sep 17, 2026 · metrics 2.10.0
PyPI
pynbody/pynbody
N-body and hydro analysis tools for Python
No licenseSep 18, 2026 · metrics 2.10.0
npm
qlik-oss/picasso.js
A charting library streamlined for building interactive visualizations for the Qlik product suites.
MITSep 19, 2026 · metrics 2.10.0
Go
ringsaturn/tzf
Get timezone via longitude and latitude in Go in a fast way
MITSep 19, 2026 · metrics 2.10.0
crates.io
rust-lang/pkg-config-rs
Build library for invoking pkg-config for Rust
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io · Maven
servo/surfman
Accelerated offscreen graphics for WebGL
Apache-2.0Sep 21, 2026 · metrics 2.10.0
PyPI
starkillerOG/reolink_aio
Reolink NVR/camera API PyPI package
MITSep 15, 2026 · metrics 2.10.0
npm
sumup-oss/foundry
A toolkit for building web applications and libraries.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
unplugin/unplugin-isolated-decl
⚡️ A blazing-fast tool for generating isolated declarations.
MITSep 16, 2026 · metrics 2.10.0
crates.io
FlorianUekermann/rustls-acme
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI · Go
ansible/receptor
Project Receptor is a flexible multi-service relayer with remote execution and orchestration capabilities linking controllers with executors across a mesh of nodes.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
autohandai/code-cli
Autohand Code CLI - Ultra fast self evolving coding agent that runs in your terminal
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
browserify/path-browserify
The path module from Node.js for browsers
MITSep 16, 2026 · metrics 2.10.0
crates.io
cloudflare/odoh-rs
Oblivious DoH library in Rust
BSD-2-ClauseSep 15, 2026 · metrics 2.10.0
Go · npm
cloudnative-pg/plugin-barman-cloud
The reference CNPG-I backup/restore plugin for Barman Cloud.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
ipfs/rainbow
IPFS HTTP Gateway daemon in Go, tuned for public production traffic: retrieval only, no pinning, no providing
Custom licenseSep 19, 2026 · metrics 2.10.0