Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,152
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
lichess-org/pgn-viewer
PGN viewer widget
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
lukeed/escalade
A tiny (183B to 210B) and fast utility to ascend parent directories
MITSep 16, 2026 · metrics 2.10.0
Go · npm
nicolastakashi/prom-analytics-proxy
prom-analytics-proxy is a lightweight proxy that captures detailed analytics on PromQL queries, providing valuable insights into query usage and performance.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
pxlrbt/filament-environment-indicator
Never confuse your tabs with different Filament environments again.
MITSep 17, 2026 · metrics 2.10.0
npm
sindresorhus/merge-descriptors
Merge objects using their property descriptors
MITSep 16, 2026 · metrics 2.10.0
npm
League-of-Foundry-Developers/foundry-vtt-types
Unofficial type declarations for the Foundry Virtual Tabletop API
MITSep 18, 2026 · metrics 2.10.0
Go · npm
Mahcks/blockbusterr
Automatically discover trending, popular, and highly rated movies and TV shows from Trakt, TMDB, or Simkl, then send them to Radarr, Sonarr, or Jellyseerr.
MITSep 20, 2026 · metrics 2.10.0
npm
danivek/json-api-serializer
Node.js/browser framework agnostic JSON API (http://jsonapi.org/) serializer.
MITSep 15, 2026 · metrics 2.10.0
Maven
huaweicloud/huaweicloud-sdk-java-obs
The OBS SDK for Java, which is used for accessing Object Storage Service
Custom licenseSep 18, 2026 · metrics 2.10.0
Go · npm
lordmathis/llamactl
Unified management and routing for llama.cpp, MLX and vLLM models with web dashboard.
MITSep 20, 2026 · metrics 2.10.0
npm
octokit/types.ts
Shared TypeScript definitions for Octokit projects
MITSep 16, 2026 · metrics 2.10.0
crates.io
tauri-apps/webkit2gtk-rs
WebKit2 bindings and wrappers for Rust
MITSep 18, 2026 · metrics 2.10.0
npm
HybridAIOne/hybridclaw
Enterprise-ready self-hosted AI assistant runtime with sandboxed execution, secure credentials, approvals, and memory
MITSep 16, 2026 · metrics 2.10.0
Packagist
jackalope/jackalope-doctrine-dbal
Doctrine DBAL transport implementation for Jackalope
Custom licenseSep 18, 2026 · metrics 2.10.0
Packagist
markrogoyski/itertools-php
PHP Iteration Tools Library
MITSep 18, 2026 · metrics 2.10.0
Go
meshery/meshery-operator
Meshery Operator is a Kubernetes Operator that deploys and manages the lifecycle of two Meshery components critical to Meshery's operations of Kubernetes clusters
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
netnr/zoning
中华人民共和国行政区划：省级（省份直辖市自治区）、 地级（城市）、 县级（区县）、 乡级（乡镇街道）、 村级（村委会居委会）
MITSep 18, 2026 · metrics 2.10.0
npm
odrick/free-tex-packer-core
Free texture packer core
MITSep 16, 2026 · metrics 2.10.0
—
openfun/marsha
:clapper: An opensource LTI Learning Content Management System (LCMS)
MITSep 17, 2026 · metrics 2.10.0
Go
pavel-one/EdgeGPT-Go
EdgeGPT-Go: Reverse engineered API of Microsoft's Bing Chat AI for Golang with GRPC, CLI, Library interface and cookie manager
MITSep 19, 2026 · metrics 2.10.0
PyPI
sabamdarif/chroot-distro
A lightweight chroot based utility for managing Linux containers
GPL-3.0Sep 15, 2026 · metrics 2.10.0
npm
SmartThingsCommunity/smartapp-sdk-nodejs
Javascript/NodeJS SDK to create SmartThings SmartApps
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist · Go
TomasVotruba/class-leak
Find leaking classes that you never use... and get rid of them.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
ankane/faiss-ruby
Efficient similarity search and clustering for Ruby
MITSep 16, 2026 · metrics 2.10.0
—
dsherret/gagen
Generate complex GitHub Actions YAML files using a declarative API.
MITSep 16, 2026 · metrics 2.10.0
PyPI
elemental-lf/benji
Benji Backup: A block based deduplicating backup software for Ceph RBD images, iSCSI targets, image files and block devices
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
fitzgen/glob-to-regexp
Convert a glob to a regular expression
No licenseSep 16, 2026 · metrics 2.10.0
RubyGems
gocardless/nandi
Fear-free migrations for PostgreSQL
MITSep 18, 2026 · metrics 2.10.0
npm
justadev-afk/twisted
Fetching riot games api data
MITSep 18, 2026 · metrics 2.10.0
crates.io
lunacookies/etcetera
An unopinionated Rust library for locating configuration, data and cache directories across platforms
Apache-2.0Sep 17, 2026 · metrics 2.10.0