Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,174
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
tosspayments/browser-sdk
토스페이먼츠 결제 연동 SDK
No licenseSep 18, 2026 · metrics 2.10.0
npm
wangzhezbz/codex-bridge
Local multi-model gateway and desktop manager for Codex. 让 Codex 在一个模型栏里使用 GPT、DeepSeek、Kimi 和更多模型。
MITSep 20, 2026 · metrics 2.10.0
Packagist
wikimedia/less.php
Less.js ported to PHP. Mirrored from https://gerrit.wikimedia.org/g/mediawiki/libs/less.php/
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
yescallop/fluent-uri-rs
A generic URI/IRI handling library compliant with RFC 3986/3987.
MITSep 18, 2026 · metrics 2.10.0
—
GLEECBTC/komodo-daemon
Komodo
Custom licenseSep 18, 2026 · metrics 2.10.0
—
JuliaClimate/ClimateTools.jl
Climate science package for Julia
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
YasogaN/google-maps-review-scraper
A npm module to scrape reviews from Google Maps
MITSep 18, 2026 · metrics 2.10.0
Maven
ballerina-platform/module-ballerina-grpc
Ballerina gRPC Module
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
bergerx/kubectl-status
A kubectl plugin to print a human-friendly output that focuses on the status fields of the resources in kubernetes.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
browser-use/bubus
📢 Production-ready python event bus library with support for async and sync handlers, forwarding betwen busses w/ parent event tracking + loop prevention, FIFO and concurrency options, and WAL persistence. Powers the browser-use library.
MITSep 17, 2026 · metrics 2.10.0
npm
feross/ieee754
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object.
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
formio/vue
Javascript Powered forms and JSON form builder for Vue.js
MITSep 15, 2026 · metrics 2.10.0
npm
miki995/ngx-monaco-editor-v2
Monaco Editor component for Angular 2 and Above
MITSep 19, 2026 · metrics 2.10.0
npm · Packagist · PyPI
nextcloud/twofactor_gateway
🔑 Second factor provider using an external messaging gateway (Signal, SMS, Telegram, WhatsApp and XMPP)
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
octokit/auth-token.js
GitHub API token authentication for browsers and Node.js
MITSep 16, 2026 · metrics 2.10.0
npm
remorses/safe-mdx
React MDX renderer that does not evaluate JavaScript on render. Works in Cloudflare Workers & Vercel Edge.
MITSep 18, 2026 · metrics 2.10.0
npm
stellar/js-stellar-base
The lowest-level stellar helper library. It consists of classes to read, write, hash, and sign Stellar xdr
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
trivago/cucable-plugin
Maven plugin that simplifies running Cucumber scenarios in parallel.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
zkcrypto/jubjub
Implementation of the Jubjub elliptic curve group
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
FelixTheC/strongtyping
Decorator which checks whether the function is called with the correct type of parameters.
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
JDongian/python-jamo
Hangul syllable decomposition and synthesis using jamo.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go · npm
OrlojHQ/orloj
An orchestration runtime for multi-agent AI systems. Declare agents, tools, and policies as YAML; Orloj schedules, executes, routes, and governs them for production-grade operation.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
SukkaW/react-compiler-webpack
The webpack/rspack loader for React Compiler
MITSep 19, 2026 · metrics 2.10.0
npm
UnrefinedBrain/vue-metamorph
Codemod Framework for Vue
MITSep 16, 2026 · metrics 2.10.0
RubyGems
ankane/xgboost-ruby
High performance gradient boosting for Ruby
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io · PyPI
developmentseed/async-tiff
Async TIFF reader for Rust and Python
MITSep 19, 2026 · metrics 2.10.0
Go
diogovalentte/homarr-iframes
iFrames of many selfhosted services to use in ANY dashboard.
MITSep 19, 2026 · metrics 2.10.0
—
drone/docs
Documentation for the Drone Continuous Integration project
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
googleapis/php-analytics-data
No repository description published.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
noahcoad/SublimeGoogleSpellCheck
Uses Google Search spelling magic to fix words or phrases for Sublime Text.
MITSep 19, 2026 · metrics 2.10.0