Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,189
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
mage-os/module-inventory-reservations-grid
See and manage Magento inventory reservations
MITSep 17, 2026 · metrics 2.10.0
Go · npm
massalabs/station-massa-wallet
Massa Station Wallet Module
MITSep 18, 2026 · metrics 2.10.0
PyPI
mcp-hangar/mcp-hangar
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
MITSep 21, 2026 · metrics 2.10.0
Packagist
mguinea/laravel-robots
Laravel package to manage robots
MITSep 18, 2026 · metrics 2.10.0
npm
mishanefedov/agentwatch
Local-only observability for AI agents on your machine. One timeline across coding and non-coding agents.
MITSep 18, 2026 · metrics 2.10.0
npm
noaignite/accelerator
A collection of NoA Ignite packages
MITSep 18, 2026 · metrics 2.10.0
Go
openshift/ocm-container
Containerized environment for accessing OpenShift v4 clusters, packing necessary tools/scripts
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
oxc-project/oxc-yaml-parser
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
npm
paddo/claude-launcher
Launch Claude Code with multiple backends (Anthropic, OpenRouter)
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
paddor/burli
Fast, memory-safe Rust Brötli codec with all-level decode, q0..q5 encode.
MITSep 18, 2026 · metrics 2.10.0
Packagist
phpbench/dom
Dom wrapper to simplify working with the PHP DOM implementation.
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
prefix-dev/async_http_range_reader
A library for streaming reading of files over HTTP using range requests
MITSep 17, 2026 · metrics 2.10.0
npm
prodlint/prodlint
Your vibe-coded app has hardcoded secrets, missing auth, and hallucinated imports. Find out in under a second.
MITSep 18, 2026 · metrics 2.10.0
PyPI
pyvista/pyvista-zstd
Compress PyVista datasets using zstandard
MITSep 18, 2026 · metrics 2.10.0
RubyGems
rapid7/metasploit-model
Common code, such as validators and mixins, that are shared between ActiveModels in metasploit-framework and ActiveRecords in metasploit_data_models
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
RubyGems
rapid7/rex-bin_tools
Created by David Maloney via the GitHub Connector
Custom licenseSep 18, 2026 · metrics 2.10.0
Go · npm
rfwlab/rfw
rfw (Reactive Framework) is a Go-based reactive framework for building web applications using WebAssembly, with future plans to support native applications and the use of GL libraries.
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Go · npm
rhemvi/omaclip
A desktop clipboard manager for Omarchy, works in Linux and macOS
MITSep 19, 2026 · metrics 2.10.0
crates.io · PyPI
rigetti/qcs-sdk-rust
Rust SDK for Rigetti Quantum Cloud Services (QCS)
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
sanks205/getobserver
Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.
MITSep 18, 2026 · metrics 2.10.0
PyPI
sattyamjjain/agent-airlock
A type-checker and contract layer for AI agent tool calls, deny-by-default, in-process, Pydantic-only. Strict argument validation, ghost-argument stripping, and self-healing retries for MCP servers and agent frameworks.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
shivamd/allrecipes
A Ruby interface to the Allrecipes API
MITSep 19, 2026 · metrics 2.10.0
—
siderolabs/kubelet
This is a repo for our docker image of the kubelet binary.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
silverstripe/webpack-config
Reusable webpack bundle declarations for Silverstripe modules
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
crates.io
skew202/antislop
A blazing-fast, multi-language linter for detecting AI-generated code slop
No licenseSep 19, 2026 · metrics 2.10.0
Go
spdx/gordf
No repository description published.
MITSep 23, 2026 · metrics 2.10.0
npm
stac-extensions/eo
Covers electro-optical data that represents a snapshot of the Earth. It could consist of cloud cover and multiple spectral bands, for example visible bands, infrared bands, red edge bands and panchromatic bands.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
statico/llmscript
🧑💻 Write your shell scripts in natural language
MITSep 20, 2026 · metrics 2.10.0
npm
sxzz/unplugin-utils
A set of utility functions commonly used by unplugins.
Custom licenseSep 23, 2026 · metrics 2.10.0
Packagist
synolia/SyliusMailTesterPlugin
Test how your emails are rendered by sending them to your email from your Sylius admin panel.
MITSep 18, 2026 · metrics 2.10.0