Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,167
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
pimcore/skeleton
The Pimcore Skeleton - The right package to get your Pimcore project started from the ground up! 💪
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
reVrost/go-openrouter
Unofficial API SDK for openrouter.ai in go
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
symfony/google-mailer
Symfony Google Mailer Bridge
MITSep 15, 2026 · metrics 2.10.0
npm
unjs/ocache
Composable caching primitives with TTL, stale-while-revalidate, and HTTP response caching. Zero framework dependencies - works with any runtime that has standard Request/Response.
MITSep 18, 2026 · metrics 2.10.0
Go
InjectiveLabs/sdk-go
Tools to work with the Injective Chain, Injective EVM and EIP712.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
achetronic/adk-utils-go
Go utilities for Google ADK. It includes LLM clients, storage for sessions and memory, context compaction, artifacts and more!
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
aio-libs/frozenlist
FrozenList is a list-like structure that implements collections.abc.MutableSequence and can be made immutable.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · Maven · RubyGems
braze-inc/braze-react-native-sdk
Public repo for the Braze React Native SDK
Custom licenseSep 21, 2026 · metrics 2.10.0
npm
colorjs/color-name
A JSON with CSS color names
MITSep 16, 2026 · metrics 2.10.0
npm
diegosouzapw/OmniGlyph
Cut your Claude bill 59–70% by rendering bulky LLM context as dense PNG pages — 100% read accuracy, exact per-provider billing math (Anthropic/OpenAI/Gemini), fail-closed gates, measured benchmarks. CLI + proxy + Cloudflare Workers. Docs in 42 languages. Part of the OmniRoute family.
MITSep 18, 2026 · metrics 2.10.0
PyPI
eyeonus/Trade-Dangerous
No repository description published.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
npm · PyPI
ringcentral/ringcentral-web-phone
RingCentral WebPhone Library for JavaScript WebRTC
No licenseSep 16, 2026 · metrics 2.10.0
—
sni/mod_gearman
Distribute Naemon Host/Service Checks & Eventhandler with Gearman Queues. Host/Servicegroups affinity included.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
crates.io
symbolicsoft/verifpal
Cryptographic protocol analysis for real-world protocols.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
vanderlee/phpSyllable
PHP Syllable splitter/counter and Hyphenator for text and HTML. Multi-language, customisable, cached and fast!
No licenseSep 15, 2026 · metrics 2.10.0
Packagist
verbb/image-resizer
A Craft CMS plugin to resize images on upload.
MITSep 17, 2026 · metrics 2.10.0
Packagist
webflo/drupal-finder
No repository description published.
GPL-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
GLEECBTC/komodo-defi-framework
This is the official Komodo DeFi Framework repository
No licenseSep 18, 2026 · metrics 2.10.0
PyPI · RubyGems
NatLabRockies/REopt_API
The model for the REopt API, which is used as the back-end for the REopt Webtool (reopt.nrel.gov/tool), and can be accessed directly via the NREL Developer Network (https://developer.nlr.gov/docs/energy-optimization/reopt)
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
awxkee/yuvutils-rs
Rust high performace utilities for YUV format handling and conversion.
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Go
c0tton-fluff/caido-mcp-server
MCP server for Caido proxy integration. Enables AI assistants like Claude Code to browse, analyse, and interact with HTTP traffic.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
coorasse/passkit
Wallet Pass generation for Ruby On Rails
MITSep 18, 2026 · metrics 2.10.0
PyPI · npm
docmancer/docmancer
Find out what your coding agents already know. Docmancer indexes the memory, rules, and instructions Claude Code, Codex, Cursor, and Gemini wrote on your machine, then carries the durable parts to every agent. It is local-first and under MIT license.
MITSep 16, 2026 · metrics 2.10.0
npm
fastify/fast-uri
Dependency-free RFC 3986 URI toolbox
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
flipbook-labs/flipbook
Storybook plugin for Roblox UI
MITSep 17, 2026 · metrics 2.10.0
Go
googleapis/go-sql-spanner
Google Cloud Spanner driver for Go's database/sql package.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
janosh/svelte-toc
Sticky responsive table of contents component
MITSep 16, 2026 · metrics 2.10.0
npm
ljharb/es-abstract
ECMAScript spec abstract operations.
MITSep 16, 2026 · metrics 2.10.0
npm
n1byn1kt/apitap
CLI, MCP server, and npm library that turns any website into an API — no docs, no SDK, no browser.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
pkgcore/pkgcore
a framework for package management
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0