Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,064
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
Smithay/dlib
A dynamic library helper for rust crates
MITSep 18, 2026 · metrics 2.10.0
crates.io
alexpasmantier/rust-devicons
A Rust library that provides filetype glyphs (icons) for a wide range of common file formats.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
amplitude/Amplitude-Python
Python Amplitude Analytics SDK
MITSep 17, 2026 · metrics 2.10.0
crates.io
autobib/nucleo-picker
a performant and unicode-aware fuzzy picker tui library for rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
aws/aws-activejob-sqs-ruby
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
bgub/npm-to-yarn
Convert npm CLI commands to yarn, and vice versa
MITSep 16, 2026 · metrics 2.10.0
npm
cipchk/angular-web-storage
Angular decorator to save and restore of HTML5 Local&Session Storage
MITSep 18, 2026 · metrics 2.10.0
Go
crate-crypto/go-ipa
A Go implementation of cryptographic primitives for Verkle Trees
Apache-2.0Sep 23, 2026 · metrics 2.10.0
crates.io
dtolnay/unsafe-libyaml
libyaml transpiled to rust by c2rust
MITSep 17, 2026 · metrics 2.10.0
Go
encoredev/encore.dev
This repository contains the Encore's Runtime API contract, which Encore applications are built against.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
npm
gajus/bamboocss
Build-time, Rust/Oxc, type-safe, zero-runtime CSS-in-JS, with per-route CSS
MITSep 19, 2026 · metrics 2.10.0
Go
giantswarm/mcp-debug
Command-line tool for debugging MCP servers
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
interactive-sonification/sc3nb
sc3nb - SuperCollider3 interface for python and jupyter notebooks
MITSep 18, 2026 · metrics 2.10.0
Go
ipfs/go-ipld-cbor
A cbor implementation of the go-ipld-format
MITSep 17, 2026 · metrics 2.10.0
RubyGems · npm
karafka/karafka-testing
Library which provides helpers for easier Karafka consumers tests
MITSep 17, 2026 · metrics 2.10.0
Go
kitaisreal/paw
Tool for performance testing, analysis, and continuous iteration over results.
No licenseSep 19, 2026 · metrics 2.10.0
—
kruton/tinyfugue
Tinyfugue MUD client (tf) with UTF-8 patches for Unicode MUDs.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go · PyPI
kubescape/node-agent
Kubescape eBPF agent 🥷🏻
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI · npm
mcp-box/mcpscore
Lighthouse for MCP — score any MCP server 0–100.
MITSep 18, 2026 · metrics 2.10.0
npm
medikoo/type
Runtime validation and processing of JavaScript types
ISCSep 23, 2026 · metrics 2.10.0
PyPI
netboxlabs/diode-sdk-python
Diode SDK Python
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
npm/npm-audit-report
npm audit security report
Custom licenseSep 23, 2026 · metrics 2.10.0
npm
npm/npm-profile
Make changes to your npmjs.com profile via cli or library
Custom licenseSep 23, 2026 · metrics 2.10.0
Go
open-cluster-management-io/argocd-pull-integration
Argo CD Application pull model using Open Cluster Management and Argo CD Agent.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
openagentidentityprotocol/agentidentityprotocol
Agent Identity Protocol - Zero-trust security layer for AI agents. Policy enforcement proxy for MCP with Human-in-the-Loop approval, DLP scanning, and audit logging.
Apache-2.0Sep 22, 2026 · metrics 2.10.0
—
pjfanning/pekko-http-json
Integrate some of the best JSON libs in Scala with Pekko HTTP
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
r3dDoX/vite-plugin-svgo
Vite plugin to import and compress svg files with SVGO
No licenseSep 18, 2026 · metrics 2.10.0
npm
release-it/keep-a-changelog
Keep a Changelog plugin for release-it
MITSep 17, 2026 · metrics 2.10.0
PyPI
scikit-hep/histoprint
Pretty print histograms to the console
MITSep 20, 2026 · metrics 2.10.0
PyPI · crates.io
sensmetry/sysand
A package manager for SysML v2 and KerML
Custom licenseSep 17, 2026 · metrics 2.10.0