Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,831
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
psyduck-etl/mysql
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
—
ptblink/ptblink-platform-ui
No repository description published.
No licenseAwaiting first inspection
npm
ptblink/ptblink-ui
PT Blink shared UI primitives, design tokens, and animation helpers.
No licenseSep 10, 2026 · metrics 2.10.0
Go
pteradigm/opentelemetry-inference
OpenTelemetry Inference using KServe v2
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
pterbsgame-netizen/effectgate
A security proxy for MCP stdio servers: it decides on what a tool call does, not on how the text is worded.
MITSep 19, 2026 · metrics 2.10.0
—
ptohy/home-assistant-mcp
No repository description published.
No licenseAwaiting first inspection
—
pub12/hazo_collab_forms
No repository description published.
No licenseAwaiting first inspection
RubyGems
pubid/pubid-etsi
PubID for ETSI
BSD-2-ClauseOct 19, 2026 · metrics 2.10.0
RubyGems
pubid/pubid-itu
Parser for ITU-T and ITU-R publication identifiers
BSD-2-ClauseOct 19, 2026 · metrics 2.10.0
RubyGems
pubid/pubid-plateau
No repository description published.
BSD-2-ClauseOct 19, 2026 · metrics 2.10.0
Go
public-cloud-wl/terraform-provider-gcsreferential
based on https://github.com/sbehl27-org/terraform-provider-cidr-reservator this aime of this one is to make it a bit more generic using gcs as referential for multiple purpose not only subnets
MPL-2.0Oct 20, 2026 · metrics 2.10.0
Go
publica-project/grpc
The Go language implementation of gRPC. HTTP/2 based RPC
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
pudonghot/redq
Redis delay queue
MITSep 22, 2026 · metrics 2.10.0
—
puglieseweb/product-systemdox
No repository description published.
No licenseAwaiting first inspection
PyPI
pulkit004/sensei
AI-powered code review CLI for GitLab MRs — learns your style, reviews like you.
MITSep 10, 2026 · metrics 2.10.0
—
pulp/pulp_certguard
No repository description published.
No licenseAwaiting first inspection
Go
pulse-network/go-pulse
No repository description published.
LGPL-3.0Oct 18, 2026 · metrics 2.10.0
crates.io
pulseengine/scry
sound abstract interpretation for WebAssembly — the third DO-333 leg of the PulseEngine verification chain
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
pulseengine/sigil
Sigil — Supply chain security for WebAssembly. Embedded signatures, Sigstore keyless signing, SLSA provenance. Part of the PulseEngine toolchain.
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
pulserver/pypulseqpp
Fast drop-in PyPulseq replacement over a C++ sequence core, with hardware safety checks.
MITSep 28, 2026 · metrics 2.10.0
Go
pulsoats/contracts
No repository description published.
No licenseOct 24, 2026 · metrics 2.10.0
Go
pulsoats/core
pulsoats-core — ядро с общими компонентами для биржевых интеграций, детекторов и WebSocket-транспорта.
No licenseOct 24, 2026 · metrics 2.10.0
Go
pulumi-labs/pulumi-exporter
OpenTelemetry Pulumi Cloud metrics exporter
MITSep 13, 2026 · metrics 2.10.0
Go · PyPI
pulumi/pulumi-ns1
A NS1 Pulumi resource package, providing multi-language access to NS1
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go · PyPI
pulumi/pulumi-null
No repository description published.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
—
pump-fun/pump-swap-sdk
No repository description published.
No licenseAwaiting first inspection
—
pumulo/timber-common
No repository description published.
No licenseAwaiting first inspection
Go
punasusi/cluster-probe
No repository description published.
MITOct 19, 2026 · metrics 2.10.0
Go
punchcms/punchdb
Database Layer
MITSep 14, 2026 · metrics 2.10.0
Go
punchh/code-push-server-go
Server that supports react-native-code-push
MITSep 20, 2026 · metrics 2.10.0