Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,196
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
benhall14/php-calendar
A simple PHP class to generate calendars. Easy to populate, the calendar shows events by passing in an array.
MITSep 17, 2026 · metrics 2.10.0
npm
binance/binance-connector-typescript
Simple Typescript connector to Binance API
MITSep 20, 2026 · metrics 2.10.0
Go
deckhouse/yandex-csi-driver
A Container Storage Interface (CSI) Driver for Yandex.Cloud Compute Disks
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
duplojs/zod-accelerator
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
Go · npm
gmuxapp/gmux
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Go
go-juicedev/juice
Like Mybatis but for golang.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
hahwul/gori
A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
hedhyw/gherkingen
Behaviour Driven Development tests generator for Golang
MITSep 19, 2026 · metrics 2.10.0
npm
jshttp/range-parser
Range header field parser
MITSep 16, 2026 · metrics 2.10.0
—
jtaylortech/journalot
Minimal journaling CLI for developers. Git-backed, terminal-native, zero friction. Just type `journal` and start writing.
MITSep 20, 2026 · metrics 2.10.0
crates.io
kolapapa/surge-ping
Asynchronous implementation of ping in rust, based on tokio 1.x
MITSep 18, 2026 · metrics 2.10.0
PyPI
na-stewart/sanic-security
An async security library for the Sanic framework.
MITSep 18, 2026 · metrics 2.10.0
npm
nvh95/react-linkedin-login-oauth2
Easily get Authorization Code from Linked In to log in without redirecting.
MITSep 22, 2026 · metrics 2.10.0
Go
p0nymc1/cee
Deterministic-first execution engine for agent workflows in Go: the LLM extracts at the edge, a deterministic state machine decides. Zero dependencies, no-code JSON plugins, replayable runs.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
rust-embedded-community/embedded-storage
An Embedded Storage Abstraction Layer
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io
seanmonstar/unicase
Unicode Case-folding for Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
udondan/cdk-ec2-key-pair
AWS CDK L3 construct for managing EC2 Key Pairs
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI · crates.io
Egoist-Machines/LodeDB
World's fastest and most compact embedded vector database: exact by default, multimodal, local-first, and GPU-accelerated
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
PixarAnimationStudios/ruby-jss
ruby-jss provides native ruby access to the REST APIs of Jamf Pro, an enterprise/education tool for managing Apple devices, from jamf.com. The Jamf module provides access to both APIs. Jamf Pro objects are implemented as classes and interact with each other. Authentication tokens, data format and other details are handled under the hood to allow simpler, intuitive automation of Jamf-related tasks.
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
Sti3bas/laravel-scout-array-driver
Array driver for Laravel Scout
MITSep 17, 2026 · metrics 2.10.0
npm
freema/mcp-gsheets
MCP server for Google Sheets - Read, write and manipulate spreadsheets through Claude Desktop
MITSep 18, 2026 · metrics 2.10.0
—
mlr-org/mlr3learners
Recommended learners for mlr3
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Packagist
phpDocumentor/GraphViz
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
red-data-tools/GR.rb
Ruby wrapper for the GR framework
Custom licenseSep 22, 2026 · metrics 2.10.0
npm
saucelabs/node-saucelabs
A wrapper around Sauce Labs API
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
Boostport/address
Address is a Go library that validates and formats addresses using data generated from Google's Address Data Service
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
DFiantHDL/DFHDL
DFiant HDL (DFHDL): A Mutli-abstraction Hardware Descripition Language and Framework
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
GoogleCloudPlatform/cloud-sql-nodejs-connector
A JavaScript library for connecting securely to your Cloud SQL instances
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · crates.io
Zondax/filecoin-solidity
Filecoin Solidity API Library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
cloudspannerecosystem/memefish
memefish is the foundation to analyze Spanner SQL
MITSep 17, 2026 · metrics 2.10.0