Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,128
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
android-sms-gateway/server
The SMS Gateway for Android™ Server enables the dispatch of SMS messages through Android devices without requiring direct Internet access to them.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
antonk52/lilconfig
Zero-dependency nodejs config seeker.
MITSep 16, 2026 · metrics 2.10.0
Go
aws/aws-cdk-go
AWS CDK bindings for Go.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist · npm
baserproject/basercms
baserCMS : Based Website Development Project
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
bendrucker/creditcards
Parse, format, and validate credit cards in JS
MITSep 18, 2026 · metrics 2.10.0
Go
binance/zkmerkle-proof-of-solvency
This is proof of solvency tool for Centralized exchanges built by Binance. Please raise bugs and security issues to https://bugcrowd.com/binance
MITSep 20, 2026 · metrics 2.10.0
npm
feross/queue-microtask
fast, tiny `queueMicrotask` shim for modern engines
MITSep 16, 2026 · metrics 2.10.0
Go · npm
grafana/xk6-sql
Use SQL databases from k6 tests.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
kanmu/dgw
dgw generates Golang struct, and simple Table/Row Data Gateway functions from PostgreSQL table metadata
MITSep 19, 2026 · metrics 2.10.0
—
marbl/meryl
A genomic k-mer counter (and sequence utility) with nice features.
Custom licenseSep 15, 2026 · metrics 2.10.0
PyPI
natekspencer/pylitterbot
Python package for controlling a Whisker connected self-cleaning litter boxes and feeders
MITSep 16, 2026 · metrics 2.10.0
Packagist
phpcfdi/sat-ws-descarga-masiva
Librería para usar el servicio web del SAT de Descarga Masiva
MITSep 20, 2026 · metrics 2.10.0
PyPI
pypa/trove-classifiers
Canonical source for classifiers on PyPI.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist
symplify/vendor-patches
Patch your vendor files the easy way
MITSep 18, 2026 · metrics 2.10.0
PyPI
altair-viz/vega_datasets
A Python package for online & offline access to vega datasets
MITSep 17, 2026 · metrics 2.10.0
npm
boscop-fr/orejime
An easy to use consent manager that focuses on accessibility.
Custom licenseSep 15, 2026 · metrics 2.10.0
crates.io
dcjones/proseg
Probabilistic cell segmentation for in situ spatial transcriptomics
Custom licenseSep 19, 2026 · metrics 2.10.0
RubyGems
dnsimple/dnsimple-ruby
The DNSimple API client for Ruby.
MITSep 18, 2026 · metrics 2.10.0
npm
frappe/frappe-react-sdk
React hooks for Frappe
MITSep 16, 2026 · metrics 2.10.0
Packagist · npm
joaopaulolndev/filament-general-settings
Create really fast and easily general settings for your Laravel Filament project.
MITSep 21, 2026 · metrics 2.10.0
npm
jwalton/gh-find-current-pr
Github Action for finding the Pull Request (PR) associated with the current SHA.
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
pulumi/pulumi-eks
A Pulumi component for easily creating and managing an Amazon EKS Cluster
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm · PyPI
Azure/gpt-rag-ingestion
The GPT-RAG Data Ingestion service automates processing of diverse documents—PDFs, images, spreadsheets, transcripts, and SharePoint—readying them for Azure AI Search. It applies smart chunking, generates text and image embeddings, and enables rich, multimodal retrieval.
MITSep 18, 2026 · metrics 2.10.0
crates.io · npm · PyPI
BoltzExchange/boltz-backend
Boltz Backend
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm · Maven
FHIR/sushi
SUSHI (aka "SUSHI Unshortens Short Hand Inputs") is a reference implementation command-line interpreter/compiler for FHIR Shorthand (FSH).
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
SAP/go-hdb
SAP HANA Database Client for Go
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
baresip/re
Generic library for real-time communications with async IO support
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
k0rdent/kcm
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
ofcold/identity-card
A simple proof of identity card of the people's Republic of China.
Custom licenseSep 19, 2026 · metrics 2.10.0
npm · PyPI
onaio/onadata
Collect, Analyze and Share
Custom licenseSep 17, 2026 · metrics 2.10.0