Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,128
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
redhat-actions/buildah-build
GitHub Action to use 'buildah' to build a container image.
MITSep 20, 2026 · metrics 2.10.0
crates.io · npm
rooch-network/rooch
VApp Container with Move Language for Bitcoin ecosystem
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
watergis/maplibre-gl-export
This module adds control which can export PDF and images. It was forked from mapbox-gl-export.
MITSep 16, 2026 · metrics 2.10.0
crates.io
worldcoin/semaphore-rs
🦀 Rust support library for semaphore
MITSep 15, 2026 · metrics 2.10.0
npm
woywro/next-lazy-hydration-on-scroll
Supercharge your Next.js app performance by lazy-loading & hydrating components only when users need them.
No licenseSep 18, 2026 · metrics 2.10.0
—
ARM-software/kleidiai
This repository is a read-only mirror of https://gitlab.arm.com/kleidi/kleidiai
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
GoogleCloudPlatform/grpc-gcp-php
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
MattiasBuelens/wasm-streams
Bridging between web streams and Rust streams using WebAssembly
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
SocialGouv/matomo-next
Matomo for Next.js applications
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist
justbetter/magento2-sentry
Magento 2 module to log to Sentry
MITSep 17, 2026 · metrics 2.10.0
npm
pillarjs/parseurl
parse a url with memoization
MITSep 16, 2026 · metrics 2.10.0
npm · Packagist
pluginsGLPI/formcreator
GLPI Plugin Formcreator (DOWNLOAD : https://github.com/pluginsGLPI/formcreator/releases)
GPL-3.0Sep 16, 2026 · metrics 2.10.0
—
schovi/baked_file_system
Virtual File System for Crystal language. Embedding your assets into final binary.
MITSep 18, 2026 · metrics 2.10.0
PyPI
sveint/flask-swagger-ui
Swagger UI blueprint for flask
MITSep 16, 2026 · metrics 2.10.0
Go
temporalio/temporal-worker-controller
Manage the lifecycle of Temporal Workers
MITSep 19, 2026 · metrics 2.10.0
crates.io
Stebalien/term
A Rust library for terminfo parsing and terminal colors.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
binance/asymmetric-key-generator
This simple tool can be used to generate an RSA PKCS#8 or Ed25519 key pairs.
MITSep 20, 2026 · metrics 2.10.0
Go
cloudfoundry/bosh-cli
BOSH CLI v2+
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
johannesvollmer/exrs
100% Safe Rust OpenEXR file library
Custom licenseSep 18, 2026 · metrics 2.10.0
Packagist
netflie/laravel-notification-whatsapp
Laravel notification channel for Whatsapp Cloud API
MITSep 17, 2026 · metrics 2.10.0
crates.io
rust-netlink/rtnetlink
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
crates.io
rust-num/num-integer
Integer trait and functions for Rust
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go · npm
zjrosen/perles
A BQL (Beads Query Language) search, dependency and multi-view kanban board Terminal UI for Beads issue tracking and multi-agent orchestration control plane workflow runner.
MITSep 19, 2026 · metrics 2.10.0
Go
AndrianBdn/oddk
Opinionated Database Deployment Kit — locally running RDS for PostgreSQL
MITSep 18, 2026 · metrics 2.10.0
PyPI
NLRWindSystems/WISDEM
Wind Plant Integrated System Design and Engineering Model
Apache-2.0Sep 19, 2026 · metrics 2.10.0
NuGet
Rickedb/OpenProtocolInterpreter
Converts the ugly string package that came from Open Protocol to an object
MITSep 17, 2026 · metrics 2.10.0
Go
hazcod/enpass-cli
Enpass commandline client
MITSep 18, 2026 · metrics 2.10.0
npm · NuGet
infinidysk/infinidysk
InfiniDysk - The NzbDAV SuperFork. Usenet streaming with a WebDAV server and a SABnzbd-compatible API.
MITSep 16, 2026 · metrics 2.10.0
crates.io
martinohmann/hcl-rs
HCL parsing and encoding libraries for rust with serde support
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
mcollina/reusify
Reuse objects and functions with style
MITSep 16, 2026 · metrics 2.10.0