Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,558
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
Warp-net/libp2p-camouflage-transport
libp2p transport wrapper that defeats Deep Packet Inspection
Custom licenseSep 19, 2026 · metrics 2.10.0
—
WildMix/Scribe
Content addressed git-like storage
MITSep 18, 2026 · metrics 2.10.0
Go
WoozyMasta/paa
Go implementation of the PAA texture format used in DayZ/Arma, with TexConvert-style config resolver, LZO/LZSS support, swizzle handling for normal maps.
MITSep 22, 2026 · metrics 2.10.0
Go · crates.io
YASSERRMD/barq-graphdb
Production-ready hybrid Graph+Vector DB for agentic AI.
MITSep 19, 2026 · metrics 2.10.0
npm
YUEEEEY/dsh-desktop-tools
dsh 环境管理插件（TypeScript）：安装即配备桌面窗口（Rust/Tauri 宿主自动获取）、运行时一键更新、平台兼容自动适配、DeepSeek 官方计费与工作区代码编辑器。
MITSep 20, 2026 · metrics 2.10.0
Go
YashVishwas/ixr
No repository description published.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
YehiaGewily/EnvGuardian
Git-native encrypted secret distribution for teams — access controlled by a reviewable file of public keys. ⚠️ Alpha, hardening in progress.
MITSep 20, 2026 · metrics 2.10.0
Go
YouSysAdmin/whoosh
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
YujiSuzuki/ai-sandbox-dkmcp
Secure AI sandbox for Claude Code / Gemini — hide secrets, enable cross-container access
MITSep 18, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.AsyncEvents
Zero-allocation async event primitives for .NET. ValueTask-based AsyncEvent<T> with sequential and parallel invocation modes, source-generated dispatch, no reflection.
MITSep 20, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.Pipeline
Shared building block for pipeline-aware Roslyn source generators in the ZeroAlloc ecosystem. Zero allocation, compile-time wiring, Native AOT compatible.
MITSep 19, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.Serialisation
A zero-allocation serialisation library for .NET. IBufferWriter<byte>-based ISerializer<T> with Roslyn source generator — AOT-safe, no reflection, works with MemoryPack, MessagePack, and System.Text.Json.
MITSep 19, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.StateMachine
Source-generated, zero-allocation finite state machines for .NET. Add [StateMachine] and [Transition] attributes to a partial class; the generator emits a TryFire switch expression with no heap allocation on the transition path. AOT-safe.
MITSep 19, 2026 · metrics 2.10.0
Go
ZhangYoungDev/dnscache-go
A production-ready DNS cache library for Go (Golang). Features async refreshing,TTL management, zero-latency lookups, and connection failover. Drop-in replacement for http.Transport.
MITSep 19, 2026 · metrics 2.10.0
Go
Zytekaron/gorl
A Go rate limiting library
MITSep 19, 2026 · metrics 2.10.0
Go · npm
a-novel/service-genai
Generative AI proxy, with cost ledger and crash safety baked in.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
a11delavar/lit-application
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Packagist
aVadim483/fast-excel-helper
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
npm
aardvark-community/aardium
Standalone electron based browser package for netcore. Provides additional features such as site screenshots.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
abd-ulbasit/sluice
L4/L7 proxy and API gateway in Go. Weighted round-robin and least-connections balancing, token-bucket rate limiting, and a three-state circuit breaker with active health checks. No dependencies in the request path.
MITSep 20, 2026 · metrics 2.10.0
Go · npm
abdul-hamid-achik/file.cheap
File processing with image optimization, social media presets, and more
MITSep 18, 2026 · metrics 2.10.0
NuGet
abjerner/Limbo.Umbraco.BlockList
Extended block list editor for Umbraco.
MITSep 18, 2026 · metrics 2.10.0
Go
abroudoux/dk
🦧 ❤️ 🐳 A minimalist TUI to interract faster with Docker
MITSep 18, 2026 · metrics 2.10.0
Go
abxy-labs/foil-server-go
Official Foil Go server SDK
MITSep 18, 2026 · metrics 2.10.0
Packagist · npm
achttienvijftien/wp-extras
No repository description published.
GPL-3.0Sep 22, 2026 · metrics 2.10.0
—
acp-protocol/acp-spec
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
adam000/blarg
Like a blog, but not
No licenseSep 19, 2026 · metrics 2.10.0
Go
adamdecaf/tz
Timezone conversion CLI
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
adedayo/checkmate-badger-project-manager
Badger DB-based project management library for the https://github.com/adedayo/checkmate analysis framework
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go
adharshmk96/semver
Manage project's semantic version alongside git tag.
Custom licenseSep 18, 2026 · metrics 2.10.0