Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,842
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
sirn-se/phrity-util-transformer
[php-lib] Type transformers, normalizers, resolvers
MITSep 25, 2026 · metrics 2.10.0
crates.io
sisshiki1969/rust-smallvec
"Small vector" optimization for Rust: store up to a small number of items on the stack
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go · PyPI
siti-nabila/orm
native orm
No licenseSep 18, 2026 · metrics 2.10.0
Go
skaphos/sting
Individual engineer history audit tooling.
MITSep 18, 2026 · metrics 2.10.0
Go
skb1129/go-utils
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
Go
sklarsa/incus-azure-pipelines
Using incus system containers to run self-hosted Azure Pipelines Agents
No licenseSep 19, 2026 · metrics 2.10.0
Go
skosovsky/guardy
Universal AI Guardrails - pipeline engine for validation, intervention actions for Go
MITSep 19, 2026 · metrics 2.10.0
—
skyformat99/events
Go package for routing, formatting and publishing events produced by a program.
MITSep 19, 2026 · metrics 2.10.0
npm
skyphusion-labs/vivijure-core
Vivijure Core: shared orchestration unifying vivijure-cf and vivijure-local (module registry, film pipeline, Platform ICD).
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
slashid/baton-retool
SlashID fork of conductorone/baton-retool — pgx/v5 port (CVE-2026-32286, CVE-2026-41889); retire when upstream ships pgx/v5
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
sledorze/cairn
Hierarchical documentation summary consolidation (content-hash freshness) + dead-link checking + multi-agent guidance (Claude/Copilot). Effect + TypeScript.
MITSep 20, 2026 · metrics 2.10.0
Go
sleuth-io/skills
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
slow-craft/nautilus-core
No repository description published.
GPL-3.0Sep 20, 2026 · metrics 2.10.0
Go
slpixe/goquery
A little like that j-thing, only in Go.
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Packagist
smakecloud/skeema
Laravel DB Schema Management through Skeema
MITSep 18, 2026 · metrics 2.10.0
Go
smart-bit-me/scomp-agent
scomp agent — relay-based mobile terminal
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
smartline-ai/pki-client
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
Go
smarty/httprouter
No repository description published.
Custom licenseSep 18, 2026 · metrics 2.10.0
—
smothiki/metaparticle-ast
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
sms-yui/world-engine
Seed of a new world. An onchain game engine, built for devs with ambition. (world/acc)
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
smurfless1/fancyrun
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go · npm
sneat-co/ext-sportius
Stable public contracts for the Sportius extension and Sneat Club.
No licenseSep 18, 2026 · metrics 2.10.0
Go · npm
sneat-co/sportius
Sports organisation, roster and Sneat Club business logic.
No licenseSep 18, 2026 · metrics 2.10.0
Go · npm
sneat-games/bidding-tictactoe
Server side of Bidding Tic-Tac-Toe game in Go language
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go · npm
sneat-games/greed-game
Server side of Greed-Game.com in Go language
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
snovichkov/di
Dependency injection container in go (golang)
MITSep 19, 2026 · metrics 2.10.0
npm
snyk/go-semver
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
so2liu/imgcd
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
soasurs/duckduckgo
A Model Context Protocol (MCP) server that provides free web search for AI agents using DuckDuckGo. No API key required.
MITSep 19, 2026 · metrics 2.10.0
—
soenneker/soenneker.gitlab.openapiclientutil
A thread-safe utility for obtaining GitLab's OpenApiClient singleton.
MITSep 24, 2026 · metrics 2.10.0