Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,112
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
xd009642/llvm-profparser
Mostly complete pure rust implementation of parsing llvm instrumentation profile data
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
yceruto/formflow-bundle
Create and manage multistep forms
MITSep 21, 2026 · metrics 2.10.0
Go
yinebebt/ethiocal
Ethiopian Calendar (ባሕረ-ሐሳብ) and date converter
MITSep 20, 2026 · metrics 2.10.0
PyPI
yoctoyotta1024/CLEO
Clara Bayley et al.'s version of the superdroplet model. CLEO is named after Cleopatra VII Thea Philopator as well as a tribute to the anonymous mathematician.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go · npm
0xsequence/go-sequence
Sequence SDK for Go
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
1102tools-dev/federal-contracting-mcps
Nine deterministic MCP servers for federal procurement data, pricing, regulations, rulemaking, and Acquisition.gov.
MITSep 18, 2026 · metrics 2.10.0
Packagist
Adyen/adyen-shopware6
Adyen Payment plugin for Shopware 6
MITSep 18, 2026 · metrics 2.10.0
Go
AnthonyMichaelTDM/zoraxy_crowdsec_bouncer
WIP crowdsec integration for the zoraxy reverse proxy
MITSep 18, 2026 · metrics 2.10.0
Go
BeppeTemp/cartographer
MCP governance server in Go for the Agentic Wiki — knowledge that composes, not that you query
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
Cykooz/libheif-sys
Rust bindings to libheif-dev
MITSep 18, 2026 · metrics 2.10.0
Packagist
JonPurvis/laravel-uninspire
😕 The opposite of the Laravel Artisan inspire command. It generates a humorous, un-inspirational quote.
MITSep 17, 2026 · metrics 2.10.0
npm
JuandaGarcia/crd-ui
💳 A credit & debit card component. Dependency-free, themeable, localizable. One package for React, Vue, Svelte and vanilla JS.
MITSep 17, 2026 · metrics 2.10.0
npm
MetaMask/torus.js
Handle communication with torus nodes
MITSep 18, 2026 · metrics 2.10.0
—
MuriloChianfa/liblpm
A high-performance C library for Longest Prefix Match (LPM) lookups, supporting both a multi-bit trie of 8-bit stride for IPv4 and a wide multi-level 16-bit stride for IPv6, featuring runtime dynamic SIMD dispatching (SSE2, SSE4.2, AVX, AVX2, AVX512F) for optimal performance and throughput on any CPU architecture.
BSL-1.0Sep 19, 2026 · metrics 2.10.0
PyPI
NVIDIA/build-system-archive-import-examples
Examples for importing precompiled binary tarball and zip archives into various build and packaging systems
MITSep 19, 2026 · metrics 2.10.0
npm
OpenZeppelin/openzeppelin-transpiler
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go · npm
RVR06/cornifer
Unleash C4 DSL authoring.
MITSep 18, 2026 · metrics 2.10.0
Packagist
Rasanga/FlashAlertBundle
Simplified way to handle (add/display) Symfony flash messages. Client side scripts are written in pure JavaScript. https://packagist.org/packages/ras/flash-alert-bundle
MITSep 20, 2026 · metrics 2.10.0
Go
aegis-aead/go-libaegis
The AEGIS family of authenticated encryption algorithms for Go.
MITSep 19, 2026 · metrics 2.10.0
crates.io
al8n/peekable
Buffered peek for `Read` and async readers (tokio, futures): inspect incoming bytes without consuming them. Useful for protocol detection, length-prefixed framing, and header inspection.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
async-aws/sqs
[READ ONLY] SQS client
MITSep 18, 2026 · metrics 2.10.0
PyPI · npm
awslabs/llm-evaluation-system
Agentic AI-guided evaluation system for comparing LLMs with multi-judge jury scoring
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
bendrucker/postgres-array
Parse postgres array columns
MITSep 23, 2026 · metrics 2.10.0
npm
bio/vue-template-compiler-patched
Patched Vue 2.7.16 template compiler with fixes for CVE‑2024‑6783 and CVE-2024-9506
MITSep 18, 2026 · metrics 2.10.0
npm
blindpaylabs/blindpay-node
BlindPay's Node.js SDK.
MITSep 18, 2026 · metrics 2.10.0
npm
buildlucid/lucid-cms
Lucid CMS helps teams build and manage structured content with flexible TypeScript configuration, polished publishing workflows, and deep extensibility.
MITSep 17, 2026 · metrics 2.10.0
Go
celestiaorg/cosmos-sdk
Fork of Cosmos SDK v0.50.x for Celestia App
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
crowdsecurity/cs-openresty-bouncer
CrowdSec bouncer for OpenResty
MITSep 18, 2026 · metrics 2.10.0
—
devkitPro/wiiload
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
Packagist · npm
featdd/dpn_glossary
Glossary extension for TYPO3
GPL-2.0Sep 21, 2026 · metrics 2.10.0