Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,252
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
noamteyssier/bitnuc
A library for efficient nucleotide sequence manipulation using 2-bit encoding
No licenseSep 21, 2026 · metrics 2.10.0
Go
noobcollective/cwf
cwf is a small tool to quickly share content (e.g. logfiles, commands, ...) with your friends and colleagues.
MITSep 19, 2026 · metrics 2.10.0
—
nspcc-dev/neofs-api
NeoFS API documentation and proto files declaration
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
oliviertassinari/material-ui
React components that implement Google's Material Design.
MITSep 20, 2026 · metrics 2.10.0
npm
ongov/ontario-design-system
Web components and npm packages for the Ontario Design System, designed to help you create great digital products for the Ontario government.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
onpayio/php-sdk
PHP-SDK For integrating with OnPay.io
MITSep 18, 2026 · metrics 2.10.0
Go
openshift-pipelines/opc
A CLI for interacting with OpenShift Pipelines!
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
paddor/lz4rip
Fast, memory-safe Rust implementation of LZ4 compression with built-in dictionary training and no-alloc support
MITSep 18, 2026 · metrics 2.10.0
Go · npm
pb33f/harific
A super fast, tiny terminal tool for quickly reviewing, searching and debugging HAR files
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
pflow-xyz/go-pflow
Petri net library — ODE, SSA & SDE simulation, parameter fitting, and formal verification, in Go
MITSep 20, 2026 · metrics 2.10.0
Go
phinze/bankshot
Open URLs and manage SSH port forwards from remote development environments
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
porada/prettier-plugin-markdown-html
Format raw HTML in Markdown with Prettier
MITSep 18, 2026 · metrics 2.10.0
crates.io
primait/jwks_client
Prima JWKS-sync client implementation for Auth0
No licenseSep 18, 2026 · metrics 2.10.0
Go
projectbeskar/beskar7
CAPI Bare-Metal Infrastructure Provider
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
projectsveltos/event-manager
Watches for events in managed clusters and generates ClusterProfiles on the fly
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
punnerud/mpedb
Embedded multi-process shared-memory database in Rust: sqlite's serverless model + PostgreSQL-grade MVCC concurrency + rigid schema validation, with multi-database workspaces and cooperative row-level security.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
qvcloud/broker
A production-grade messaging abstraction for Go. It provides a unified API to decouple business logic from various brokers including Kafka, RabbitMQ, RocketMQ, NATS, Redis, and AWS SQS. Featuring built-in OpenTelemetry integration and engineered for high reliability.
MITSep 19, 2026 · metrics 2.10.0
npm
railwayapp/inkwell
Inkwell is a markdown editor and renderer for React with an extensible plugin system.
MITSep 18, 2026 · metrics 2.10.0
Go
rancher/charts-build-scripts
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
rezmoss/go-cloudip
Sub-microsecond cloud-provider IP detection for Go , AWS, GCP, Azure, Cloudflare, DigitalOcean, Oracle. Auto-updating, offline-capable, thread-safe
MITSep 18, 2026 · metrics 2.10.0
Go · PyPI
rjpruitt16/aquifer
Retry storm mitigation infra for systems that cannot scale instantly
MITSep 18, 2026 · metrics 2.10.0
crates.io
roberts-pumpurs/supabase-rs-utils
Supabase Auth, Realtime, RPC client written in Rust
MITSep 17, 2026 · metrics 2.10.0
RubyGems
robinvdvleuten/addressing
Addressing library powered by CLDR and Google's address data
MITSep 18, 2026 · metrics 2.10.0
npm
rootlyhq/backstage-plugin
Backstage plugin to manage Rootly incidents, services, and teams directly from Backstage
MITSep 18, 2026 · metrics 2.10.0
npm
rvagg/ghrepos
A node library to interact with the GitHub repos API
MITSep 19, 2026 · metrics 2.10.0
npm
rxdi/core
This repository is archived and moved to Monorepo https://github.com/rxdi/rxdi-monorepo/tree/master/packages/core
No licenseSep 18, 2026 · metrics 2.10.0
Go
scylladb/terraform-provider-scylladbcloud
Terraform provider for ScyllaDB Cloud.
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
securesign/secure-sign-operator
Kubernetes Operator for deploying and managing Sigstore components like Fulcio, Rekor, TSA, and TUF.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
semgrep/semgrep-network-broker
Facilitates network access between Semgrep and on-prem resources
MITSep 18, 2026 · metrics 2.10.0
Go
siderolabs/talemu
Talos emulator that can simulate multiple Talos nodes at the same time
MPL-2.0Sep 18, 2026 · metrics 2.10.0