Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,148
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
aligay/jsonuri
🌳 阿里剑鱼、iceluna、vanex 数据操作底层库，使用O(n) 复杂度回溯祖先节点
MITSep 18, 2026 · metrics 2.10.0
—
andisearch/airun
Run AI prompts like programs. Executable markdown with shebang, Unix pipes, and output redirection. Extends Claude Code with cross-cloud provider switching and any-model support — free local or 100+ cloud models.
MITSep 18, 2026 · metrics 2.10.0
npm
ec-europa/europa-component-library
ECL - Europa Component Library
EUPL-1.1Sep 15, 2026 · metrics 2.10.0
npm
prosekit/prosemirror-adapter
Universal adapter to create prosemirror nodeview from modern UI frameworks.
MITSep 16, 2026 · metrics 2.10.0
NuGet
ravibpatel/ILRepack.Lib.MSBuild.Task
MSBuild task for ILRepack which is an open-source alternative to ILMerge.
Custom licenseSep 16, 2026 · metrics 2.10.0
crates.io
shssoichiro/ffmpeg-the-third
A fork of the abandoned ffmpeg-next crate which is a fork of the abandoned ffmpeg crate
WTFPLSep 18, 2026 · metrics 2.10.0
Go · npm
stephnangue/warden
The secure gateway connecting AI agents to enterprise systems.
MPL-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
timvink/mkdocs-table-reader-plugin
MkDocs plugin that enables a markdown tag like {{ read_csv('table.csv') }} to directly insert various table formats into a page
MITSep 17, 2026 · metrics 2.10.0
—
MistEO/meojson
✨ Next-gen C++ JSON Serialization Engine | Zero Dependency | Header-Only | Unleash JSON Potential
MITSep 18, 2026 · metrics 2.10.0
npm
OpenZeppelin/openzeppelin-confidential-contracts
Solidity library of encrypted contracts using Zama's FHEVM
MITSep 15, 2026 · metrics 2.10.0
Go
anaskhan96/go-password-encoder
Go package to encode (with random generated salt) and verify passwords
MITSep 20, 2026 · metrics 2.10.0
PyPI
byteface/domonic
Python DOM and HTML toolkit - generate, parse and manipulate HTML/XML/SVG with CSS selectors, XPath, Web APIs and JavaScript-like utilities.
MITSep 15, 2026 · metrics 2.10.0
crates.io
danburkert/fs2-rs
Extended utilities for working with files and filesystems in Rust
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
dhicoc/dsh-reverse-skill
Complete reverse-skill (87 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
MITSep 21, 2026 · metrics 2.10.0
npm
flmnt/graphemer
Unicode character splitter
MITSep 16, 2026 · metrics 2.10.0
npm
geomatico/maplibre-cog-protocol
Display Cloud Optimized GeoTIFFs, satellite imagery and elevation models directly in MapLibre GL JS
MITSep 19, 2026 · metrics 2.10.0
Packagist · npm
humanmade/coding-standards
Human Made coding standards for modern code
No licenseSep 17, 2026 · metrics 2.10.0
npm
inspect-js/object-inspect
string representations of objects in node and the browser
MITSep 16, 2026 · metrics 2.10.0
npm
jonpyt/prism-code-editor
Lightweight, extensible code editor component for the web using Prism
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
just-every/mcp-read-website-fast
Quickly reads webpages and converts to markdown for fast, token efficient web scraping
MITSep 20, 2026 · metrics 2.10.0
RubyGems
justinhoward/cutoff
Deadlines for Ruby
MITSep 17, 2026 · metrics 2.10.0
RubyGems
larskanis/libusb
Access USB devices from Ruby via libusb-1.x
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
mintance/nginx-clickhouse
Simple nginx logs parser & transporter to ClickHouse database.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io · PyPI
rustls/webpki
WebPKI X.509 Certificate Validation in Rust
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
Hostzero-GmbH/keycloak-operator
Kubernetes operator for Keycloak. Manage realms, clients, users, roles, and identity providers as code. Features GitOps support, automatic secret sync, drift detection, and works with Keycloak 20-26+.
MITSep 20, 2026 · metrics 2.10.0
Go · npm
VictoriaMetrics/victoriametrics-datasource
Grafana datasource for VictoriaMetrics
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
NuGet
aws/integrations-on-dotnet-aspire-for-aws
This repository contains integrations with Aspire for AWS.
MIT-0Sep 16, 2026 · metrics 2.10.0
crates.io
comex/rust-shlex
Split a string into shell words, like Python's shlex.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
dcmjs-org/dicomweb-client
JavaScript client for DICOMweb RESTful services
MITSep 15, 2026 · metrics 2.10.0