Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,178
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io · npm
GreptimeTeam/dashboard
GreptimeDB dashboard web application.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
amphp/file
An abstraction layer and non-blocking file access solution that keeps your application responsive.
MITSep 17, 2026 · metrics 2.10.0
npm
dipson88/treeselectjs
Treeselect on vanilla JS
MITSep 20, 2026 · metrics 2.10.0
crates.io
dtolnay/unicode-ident
Determine whether characters have the XID_Start or XID_Continue properties
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist · PyPI
imbo/behat-api-extension
API extension for Behat, used to ease testing of JSON-based APIs
MITSep 17, 2026 · metrics 2.10.0
Go
justtrackio/gosoline
Gosoline is our framework which fuels all of our Golang applications
MITSep 20, 2026 · metrics 2.10.0
crates.io
linebender/color
Color in Rust.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
omnilib/ufmt
Safe, atomic formatting with black and µsort
MITSep 17, 2026 · metrics 2.10.0
crates.io
sunfishcode/io-lifetimes
A low-level I/O ownership and borrowing library
Custom licenseSep 18, 2026 · metrics 2.10.0
crates.io
udoprog/relative-path
Portable relative UTF-8 paths for Rust.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
vercel/webpack-asset-relocator-loader
Used in ncc while emitting and relocating any asset references
MITSep 18, 2026 · metrics 2.10.0
crates.io
vetis-server/vetis
A blazingly fast, minimalist HTTP server built for modern Rust applications.
MITSep 18, 2026 · metrics 2.10.0
Go
vmware-labs/distribution-tooling-for-helm
Helm Distribution plugin is is a set of utilities and Helm Plugin for making offline work with Helm Charts easier. It is meant to be used for creating reproducible and relocatable packages for Helm Charts that can be moved around registries without hassles. This is particularly useful for distributing Helm Charts into airgapped environments.
Custom licenseSep 17, 2026 · metrics 2.10.0
—
xxsds/sdsl-lite
Succinct Data Structure Library 3.0
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
zarr-developers/zarr-specs
Zarr core protocol for storage and retrieval of N-dimensional typed arrays
CC-BY-4.0Sep 19, 2026 · metrics 2.10.0
npm
zirkelc/ai-retry
Retries and fallbacks for the AI SDK
MITSep 19, 2026 · metrics 2.10.0
npm
11ty/dev-server
A minimal generic web-development web server.
No licenseSep 18, 2026 · metrics 2.10.0
npm
QubitProducts/cherrytree
A flexible nested router.
MITSep 16, 2026 · metrics 2.10.0
npm
SocketCluster/socketcluster-server
Minimal server module for SocketCluster
MITSep 20, 2026 · metrics 2.10.0
npm · Maven
adobe/aem-core-cif-components
A set of configurations and components to get you started with AEM Commerce development
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
amphp/hpack
HPack - HTTP/2 header compression implementation in PHP.
MITSep 18, 2026 · metrics 2.10.0
crates.io
andylokandy/arraydeque
A circular buffer with fixed capacity (Rust).
MITSep 18, 2026 · metrics 2.10.0
Maven
ballerina-platform/module-ballerinax-azure.functions
The implementation of Azure Functions compiler extension for Ballerina.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
farcaster-project/farcaster-node
Farcaster cross-chain atomic swap node.
MITSep 18, 2026 · metrics 2.10.0
Packagist
googleapis/google-cloud-php-vision
No repository description published.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
laravel/doctor
Diagnostics for Laravel applications
MITSep 16, 2026 · metrics 2.10.0
—
marcogrecopriolo/guglielmo
Qt based FM / Dab tuner
GPL-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
nylas/nylas-python
Python bindings for the Nylas Platform API
MITSep 16, 2026 · metrics 2.10.0
npm
octokit/fixtures
Fixtures for all the octokittens
MITSep 16, 2026 · metrics 2.10.0
npm
playcanvas/web-components
Web Components for building declarative, graphical web apps
MITSep 18, 2026 · metrics 2.10.0