Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,178
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
PENGUINLIONG/spirq-rs
Light weight SPIR-V reflection library
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
Scalingo/acadock-monitoring
Monitor docker containers to get real time CPU/Memory
MITSep 18, 2026 · metrics 2.10.0
npm
Vencord/venmic
linux audio screenshare for discord (or any electron app) via pipewire
MPL-2.0Sep 15, 2026 · metrics 2.10.0
npm
WebReflection/html-escaper
A module to escape/unescape common problematic entities done the right way.
MITSep 16, 2026 · metrics 2.10.0
Go
airbnb/rudolph
A serverless sync server for Santa, built on AWS
MITSep 19, 2026 · metrics 2.10.0
—
andrewcooke/ParserCombinator.jl
A parser combinator library for Julia
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
apollographql/skills
Apollo GraphQL Agent Skills
MITSep 20, 2026 · metrics 2.10.0
npm
chaijs/deep-eql
Improved deep equality testing for Node.js and the browser.
MITSep 16, 2026 · metrics 2.10.0
—
cminyard/gensio
A library to abstract stream I/O like serial port, TCP, telnet, UDP, SSL, IPMI SOL, etc.
GPL-2.0Sep 16, 2026 · metrics 2.10.0
npm · PyPI
coda/packs-sdk
SDK for Coda Packs
MITSep 19, 2026 · metrics 2.10.0
crates.io
gtema/openstack
OpenStack SDK for Rust with CLI and TUI
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
jonschlinkert/normalize-path
Normalize file path slashes to be unix-like forward slashes. Used by chokidar, anymatch, and many others!
MITSep 16, 2026 · metrics 2.10.0
—
just-buildsystem/justbuild
just, a generic build tool
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
ryadios/torrent-tui
⚡A lightweight tui based bit torrent client
No licenseSep 20, 2026 · metrics 2.10.0
Go
ziflex/lecho
Zerolog wrapper for Echo framework 🍅
MITSep 19, 2026 · metrics 2.10.0
crates.io
AeroRust/nmea
NMEA 0183 - for communication between marine electronics such as echo sounder, sonars, anemometer, gyrocompass, autopilot, GNSS receivers and many other types of instruments. Defined and controlled by the National Marine Electronics Association (NMEA)
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
Doist/todoist-sdk-typescript
A TypeScript wrapper for the Todoist REST API.
MITSep 20, 2026 · metrics 2.10.0
Packagist
Grazulex/laravel-apiroute
Complete API versioning lifecycle management for Laravel
MITSep 17, 2026 · metrics 2.10.0
npm
RyanZim/universalify
Make a callback- or promise-based function support both promises and callbacks.
MITSep 16, 2026 · metrics 2.10.0
Packagist
Vonage/vonage-php-sdk
Wrapper package to bring in the vonage/client-core code and an HTTP client
MITSep 15, 2026 · metrics 2.10.0
npm
ashleygwilliams/rockyou
exports the rockyou passwords for security testing
MITSep 19, 2026 · metrics 2.10.0
—
awslabs/aws-c-mqtt
C99 implementation of the MQTT 3.1.1 specification.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI · RubyGems
fpvandoorn/carleson
A formalized proof of Carleson's theorem in Lean
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
hanyeol/model-compose
Deploy production-ready AI services in minutes. One YAML file for agents, RAG pipelines, and MCP servers — run anywhere. Inspired by docker-compose.
MITSep 18, 2026 · metrics 2.10.0
crates.io
kornelski/rust-rgb
struct RGB for sharing pixels between crates
MITSep 17, 2026 · metrics 2.10.0
RubyGems
opentok/OpenTok-Ruby-SDK
OpenTok Server SDK for Ruby
MITSep 18, 2026 · metrics 2.10.0
Maven
smithy-lang/smithy-kotlin
Smithy code generator for Kotlin
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
tidepool-org/blip
Blip is the internal name for Tidepool for Web, a tool for seeing diabetes data in one place.
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
versatiles-org/versatiles-style
Toolkit for generating MapLibre styles.
MITSep 18, 2026 · metrics 2.10.0
crates.io
DGriffin91/obvhs
BVH Construction and Traversal Library
Apache-2.0Sep 18, 2026 · metrics 2.10.0