Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,161
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
0xdea/rhabdomancer
Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.
MITSep 19, 2026 · metrics 2.10.0
npm
ClickHouse/click-ui
The home of the ClickHouse design system and component library.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
—
Ditectrev/Scrum-Master-I-PSM-I-Practice-Tests-Exams-Questions-Answers
⛳️ PASS: Scrum Master I (PSM I) by learning based on our Questions & Answers (Q&A) Practice Tests Exams.
No licenseSep 16, 2026 · metrics 2.10.0
npm
Lemick/open-iframe-resizer
Open-source modern iframe resizer
MITSep 18, 2026 · metrics 2.10.0
npm
anycable/anycable-client
AnyCable / Action Cable JavaScript client for web, Node.js & React Native
MITSep 18, 2026 · metrics 2.10.0
NuGet
dotnet/SyndicationFeedReaderWriter
A .NET Standard Library for reading and writing RSS 2.0 and ATOM 1.0 syndication feeds
MITSep 16, 2026 · metrics 2.10.0
Go · npm
flowexec/flow
Local-first CLI for defining and running your project's workflows.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
pytdbot/client
Easy-to-use asynchronous TDLib wrapper for Python.
MITSep 21, 2026 · metrics 2.10.0
—
scorpius2k1/linux-bsp-casefolding-workaround
Workaround for case folding issues for BSP map files with custom assets in Steam games on Linux
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Packagist
theiconic/name-parser
A universal, language-independent name parser PHP library
MITSep 16, 2026 · metrics 2.10.0
crates.io
typst-community/tytanic
A test runner for typst projects.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
Cydhra/vers
Succinct data structures using very efficient rank and select
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
TomasVotruba/phpstan-bodyscan
Get error count for each PHPStan level
MITSep 16, 2026 · metrics 2.10.0
npm
awslabs/iot-app-kit
A development library for creating web applications to visualize industrial data
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
bububa/oceanengine
巨量引擎marketing-api golang sdk
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
confidential-containers/guest-components
Confidential Containers Guest Tools and Components
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
kintone/js-sdk
A monorepo for Kintone development tools :wrench:
MITSep 16, 2026 · metrics 2.10.0
npm
pke/eslint-plugin-redux-saga
ESLint rules for redux-saga
MITSep 18, 2026 · metrics 2.10.0
npm
techfort/mimir
bag-of-words calculator in javascript
MITSep 20, 2026 · metrics 2.10.0
Go · npm
voidmind-io/voidllm
Privacy-first LLM proxy and AI gateway - load balancing, multi-provider routing, API key management, usage tracking, rate limiting. Self-hosted. Zero knowledge of your prompts.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
GEOLYTIX/xyz
An open source javascript framework for spatial data and application interfaces.
MITSep 18, 2026 · metrics 2.10.0
Packagist
Grazulex/laravel-chronotrace
🎥 Record and replay Laravel requests deterministically and generate tests from production traces.
MITSep 18, 2026 · metrics 2.10.0
—
MacPaw/XADMaster
Objective-C library for archive and file unarchiving and extraction
LGPL-2.1Sep 18, 2026 · metrics 2.10.0
crates.io
Mirror-Protocol/mirror-contracts
Smart contracts powering Mirror Protocol on Terra
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
TransluceAI/docent
No repository description published.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm · Maven · RubyGems
adjust/react_native_sdk
This is the React Native SDK of
MITSep 20, 2026 · metrics 2.10.0
npm
akshaykmr/teletype
Stream and share terminals over the web. Show off mad cli-fu, help a colleague, teach, or troubleshoot. end-to-end encrypted 🛡
Custom licenseSep 20, 2026 · metrics 2.10.0
Go
antgroup/hugescm
HugeSCM - A next generation cloud-based version control system
Apache-2.0Sep 22, 2026 · metrics 2.10.0
crates.io · npm
anweiss/cddl
Concise data definition language (RFC 8610) implementation and JSON and CBOR validator in Rust
MITSep 17, 2026 · metrics 2.10.0
Go
deepnoodle-ai/dive
Use Dive to quickly build AI agents in Go. Build agentic CLIs or add AI to your backend Go services. Easily customized and embedded in larger applications.
Apache-2.0Sep 19, 2026 · metrics 2.10.0