Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,039
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
hellman/cry
SageMath/Python Toolkit for Cryptanalytic Research
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
indexmap-rs/equivalent
Rust traits for key comparison in maps.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
kyndryl-open-source/hashi-vault-js
A node.js module to interact with the Hashicorp Vault API.
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
loancrate/prisma-schema-parser
Prisma Schema Parser
ISCSep 18, 2026 · metrics 2.10.0
Go · npm
mendersoftware/mender-server
Mender Server for managing devices and deployments.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
mikioh/tcpinfo
Package tcpinfo implements encoding and decoding of TCP-level socket options regarding connection information
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
PyPI
mina86/pygtrie
Python library implementing a trie data structure.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
mlcommons/logging
MLPerf™ logging library
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
mudler/nib
A tiny, zero-dependency LLM agent harness that lives in your terminal. One static binary. No runtime, no daemon, no cloud. Local-LLM friendly. Summon it anywhere with Ctrl+Space.
MITSep 23, 2026 · metrics 2.10.0
Go
naiba/proxy-in-a-box
Automatic proxy pool for web scraping - crawls, validates, and rotates proxies with rate limiting and MITM support
MITSep 20, 2026 · metrics 2.10.0
Maven
neuml/txtai.java
Java client for txtai
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
oak-invest/kiso
Kiso is a publishing engine that turns Open Knowledge Format (OKF) bundles into static websites for humans and AI agents. We also provide an MCP Server.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
open-telemetry/build-tools
Building tools provided by OpenTelemetry
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
open-telemetry/opentelemetry-proto-go
Generated code for OpenTelemetry protobuf data model
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
opengeo-tech/GeoPicker
Geospatial data picker via fast Api Rest interface, not only another simple elevation service.
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
Go
orion-belt-dev/orion-belt
Self-hosted SSH/RDP access gateway with PAM workflows — reverse-tunnel agents, session recording, JIT approvals, and ReBAC. A lighter self-hosted alternative to the big zero-trust access platforms.
Custom licenseSep 21, 2026 · metrics 2.10.0
Hex
perzanko/blurhash-elixir
Pure Elixir implementation of Blurhash algorithm with no additional dependencies.
MITSep 18, 2026 · metrics 2.10.0
crates.io
projectfluent/fluent-langneg-rs
Library for language and locale identifier negotiation.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
randomites/plain
A small Rust library that allows users to reinterpret data of certain types safely.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
sjanel/aeronet
Modern, fast and ergonomic C++ HTTP/1.1, HTTP/2 and WebSocket server & client library for Linux, macOS and Windows, perfect for microservices.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go · npm
smallfawn/sillyGirl
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
Packagist
starfederation/datastar-php
Official Datastar PHP SDK.
MITSep 19, 2026 · metrics 2.10.0
PyPI
tox-dev/tox-ini-fmt
Formats your tox.ini files
MITSep 18, 2026 · metrics 2.10.0
PyPI
un33k/python-ipware
Returns the best matched IP address from a given HTTP(s) header in Python
MITSep 17, 2026 · metrics 2.10.0
RubyGems
voxpupuli/facterdb
A Database of OS facts provided by Facter
Apache-2.0Sep 18, 2026 · metrics 2.10.0
—
wiiu-env/MochaPayload
No repository description published.
GPL-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
0xfnzero/sol-parser-sdk
Rust parser core for Solana DEX events from Yellowstone gRPC, Jito ShredStream, RPC transactions, and account data with Borsh/zero-copy backends.
MITSep 17, 2026 · metrics 2.10.0
Go
Comcast/fishymetrics
Redfish API Prometheus Exporter for monitoring large scale server deployments
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
Embraser01/typoas
Open API (OAS 3.0) Typescript generator
MITSep 18, 2026 · metrics 2.10.0
Packagist
FriendsOfShopware/FroshProductCompare
This plugin allows your customers to compare products.
MITSep 18, 2026 · metrics 2.10.0