Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,234
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
radwinskis/RadGEEToolbox
Python package simplifying large-scale operations using Google Earth Engine (GEE) for users who utilize Landsat and Sentinel
MITSep 20, 2026 · metrics 2.10.0
PyPI
rcsb/foldmatch
Embedding methods for structure similarity search
MITSep 17, 2026 · metrics 2.10.0
Packagist
rhukster/dom-sanitizer
A simple but effective DOM/SVG/MathML Sanitizer for PHP 7.3+
MITSep 17, 2026 · metrics 2.10.0
npm
ridvanaltun/commitlint-plugin-selective-scope
Limit scopes per type with regexp and plain text.
MITSep 17, 2026 · metrics 2.10.0
crates.io
rust-lang/literal-escaper
Provides code to unescape string literals. It is used by rustc_lexer and proc_macro.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
rust-lang/rustc-stable-hash
A stable hashing algorithm used by rustc: cross-platform, deterministic, not secure
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
sainipankaj15/All-In-One-Broker
Go library for interacting with multiple Indian stock brokers' APIs
MITSep 20, 2026 · metrics 2.10.0
Go
samuel/go-pcx
PCX image encoder and decoder for Go
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
santhosh-tekuri/xpath
XPath 1.0 Engine in Go
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
sclevine/xsum
Checksums with Merkle trees and concurrency
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
semaphoreio/sem-ai
AI-first CLI for Semaphore CI/CD. 80+ tools, embedded MCP server, JSON output
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
sergeymakinen/go-systemdconf
systemd configuration file parser/serializer and systemd mappings
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Go
shawnpeng17/17vpn
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
npm · Maven
shubh73/expo-phone-number-hint
📱 Provides a frictionless way to show a user's (SIM-based) phone numbers as a hint.
MITSep 18, 2026 · metrics 2.10.0
Go
snaga/ast-digger
AIエージェント用コード探索CLI「AST-Digger」
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
stevez/nextcov
Next.js code coverage for Playwright E2E tests using V8 coverage
MITSep 18, 2026 · metrics 2.10.0
Go
strehle/cmdline-openid-client
A command line client for openid connect
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
suborbital/javy
JS to WebAssembly toolchain
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
sveinse/canopen-asyncio
CANopen for Python
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm · crates.io
swanysimon/mdlint
A tool for consistent, reliable Markdown formatting and best practices
UnlicenseSep 22, 2026 · metrics 2.10.0
npm · Maven · RubyGems
switchboard-sdk/EdgeSpeech
React Native hook for on device speech processing
MITSep 18, 2026 · metrics 2.10.0
Packagist
symfony/microsoft-teams-notifier
Symfony Microsoft Teams Notifier Bridge
MITSep 17, 2026 · metrics 2.10.0
—
taigrr/glaze.nvim
🍩 A Mason/Lazy-style manager for Go binaries in Neovim. Go + Lazy = Glaze.
0BSDSep 20, 2026 · metrics 2.10.0
Go · npm
thelinuxer/pgvoyager
A modern PostgreSQL database explorer with schema browser, SQL editor, ERD visualization, and embedded Claude Code terminal for AI-assisted database operations
MITSep 19, 2026 · metrics 2.10.0
Packagist
thieleundklose/tk-typo3-autotranslate
No repository description published.
GPL-2.0Sep 18, 2026 · metrics 2.10.0
npm
tillig/json-sort-cli
Runs JSON stable sort on specified files via CLI or as a pre-commit hook.
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
tiny-systems/tiny
Run the real Claude Code & Codex CLIs as pods on your own Kubernetes. Close the laptop, the session keeps working. Hand off the one you're in. MIT.
MITSep 20, 2026 · metrics 2.10.0
npm
toneflix/vue-component-pack
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
trailofbits/rfc8785.py
A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
turbot/steampipe-plugin-salesforce
Use SQL to instantly query Salesforce resources. Open source CLI. No DB required.
Apache-2.0Sep 19, 2026 · metrics 2.10.0