Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,071
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
pgsty/pgext
PG Extension Catalog Utils
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
pingcap/tiunimanager
TiUniManager
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
pkgcore/pkgdev
collection of tools for Gentoo development
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
crates.io · npm · PyPI
quartiq/miniconf
Rust serialize/deserialize/access reflection for trees (no_std, no alloc)
MITSep 18, 2026 · metrics 2.10.0
NuGet
rds1983/XNAssets
Alternative to MonoGame Content Pipeline that loads raw assets.
MITSep 19, 2026 · metrics 2.10.0
Go
smartcontractkit/chainlink-common
SDK for building Chainlink Services and Plugins
Custom licenseSep 20, 2026 · metrics 2.10.0
Go
suzuki-shunsuke/ghaperf
ghaperf is a CLI to analyze the performance of GitHub Actions using GitHub API and raw job logs
MITSep 20, 2026 · metrics 2.10.0
npm
swimlane/ngx-cron
🕒 User-friendly cron input...
MITSep 20, 2026 · metrics 2.10.0
Go
taigrr/apple-silicon-accelerometer
Go library for Apple Silicon accelerometer, gyroscope, ALS, and lid angle via IOKit HID (Bosch BMI286). Zero CGO.
MITSep 19, 2026 · metrics 2.10.0
NuGet
takenet/blip-sdk-csharp
The C# SDK for the blip.ai bot platform
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
tggo/goRDFlib
Go RDF library with full SPARQL 1.1 query/update engine and SHACL validator. 100% W3C conformance (1221/1221 tests). Port of Python RDFLib.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
npm · Maven · RubyGems
uerceg/play-install-referrer-react-native
Play Install Referrer Library ported to React Native
MITSep 19, 2026 · metrics 2.10.0
crates.io
xoloki/wsts
Weighted Schnorr Threshold Signatures
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm · RubyGems
18F/identity-design-system
An extension of the U.S. Web Design System used on Login.gov sites to consistently identify the Login.gov brand.
CC0-1.0Sep 20, 2026 · metrics 2.10.0
Go
Azure/local-csi-driver
local-csi-driver provides access to local NVMe storage from Kubernetes
MITSep 18, 2026 · metrics 2.10.0
Go
ClickHouse/terraform-provider-clickhousedbops
This is the official Terraform provider for ClickHouse database operations.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
FoamScience/foam-language-server
A language server for OpenFOAM case files
No licenseSep 18, 2026 · metrics 2.10.0
Go
Intrinsec/s3proxy
S3 Proxy for client side encryption
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
—
JuliaWeb/URIs.jl
URI parsing in Julia
Custom licenseSep 17, 2026 · metrics 2.10.0
Go · PyPI
PaloAltoNetworks/terraform-aws-swfw-modules
Terraform Reusable Modules for Software Firewalls on AWS
MITSep 20, 2026 · metrics 2.10.0
Go
SpellingDragon/wechat-robot-go
WeChat iLink Bot API Go SDK - 微信官方机器人启动框架
MITSep 19, 2026 · metrics 2.10.0
PyPI · npm
TrustedFirmware-A/trusted-firmware-a
Read-only mirror for Trusted Firmware A
Custom licenseSep 20, 2026 · metrics 2.10.0
Packagist
alexandresalome/PHP-Selenium
PHP Selenium library
MITSep 19, 2026 · metrics 2.10.0
crates.io
alltuner/mise-completions-sync
Automatically sync shell completions for tools managed by mise
MITSep 19, 2026 · metrics 2.10.0
PyPI
altcha-org/altcha-lib-py
A lightweight Python library for creating and verifying ALTCHA challenges.
MITSep 19, 2026 · metrics 2.10.0
RubyGems
ankane/blazer-docker
A Docker image for Blazer
MITSep 19, 2026 · metrics 2.10.0
—
apache/spark-connect-swift
Apache Spark Connect Client for Swift
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
birdofpreyru/babel-plugin-react-css-modules
Transforms styleName to className using compile time CSS module resolution.
Custom licenseSep 16, 2026 · metrics 2.10.0
Packagist
cakephp/plugin-installer
A composer installer for installing CakePHP plugins.
Custom licenseSep 18, 2026 · metrics 2.10.0
NuGet
cezarypiatek/GRPC-Mock-Server
Super fast, platform independent, standalone component for mocking GRPC services using WireMock.NET stubbing engine
MITSep 21, 2026 · metrics 2.10.0