Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,374
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
timotejroiko/sweph
The definitive Swiss Ephemeris bindings for Node.js
Custom licenseSep 24, 2026 · metrics 2.10.0
Maven
sevntu-checkstyle/sevntu.checkstyle
Additional Checkstyle checks, that could be added as extension to EclipseCS plugin and maven-checkstyle-plugin, Sonar checkstyle plugin, extension for CheckStyle IDEA plugin.
No licenseSep 20, 2026 · metrics 2.10.0
Go
jackc/pgconn
No repository description published.
MITSep 23, 2026 · metrics 2.10.0
Packagist · npm
pradosoft/prado
Prado - Component Framework for PHP
Custom licenseSep 25, 2026 · metrics 2.10.0
crates.io
sigp/discv5
Rust implementation of Discovery v5
Apache-2.0Sep 26, 2026 · metrics 2.10.0
PyPI
AI-Hypercomputer/xpk
xpk (Accelerated Processing Kit, pronounced x-p-k,) is a software tool to help Cloud developers to orchestrate training jobs on accelerators such as TPUs and GPUs on GKE.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
eProsima/Fast-CDR
eProsima FastCDR library provides two serialization mechanisms. One is the standard CDR serialization mechanism, while the other is a faster implementation of it. Looking for commercial support? Contact info@eprosima.com
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
mahdin75/gis-mcp
A Model Context Protocol (MCP) server implementation that connects Large Language Models (LLMs) to GIS operations using GIS libraries, enabling AI assistants to perform geospatial operations and transformations.
MITSep 20, 2026 · metrics 2.10.0
crates.io · Maven
servo/surfman
Accelerated offscreen graphics for WebGL
Apache-2.0Sep 21, 2026 · metrics 2.10.0
PyPI
1Password/onepassword-sdk-python
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Maven
binance/binance-futures-connector-java
Simple Java connector to Binance Futures API
MITSep 20, 2026 · metrics 2.10.0
npm
haiafara/vue-it-bigger
A simple image / (YouTube) video lightbox component for Vue 3.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
ianlancetaylor/demangle
C++ symbol name demangler written in Go
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
Go
android-sms-gateway/server
The SMS Gateway for Android™ Server enables the dispatch of SMS messages through Android devices without requiring direct Internet access to them.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
binance/zkmerkle-proof-of-solvency
This is proof of solvency tool for Centralized exchanges built by Binance. Please raise bugs and security issues to https://bugcrowd.com/binance
MITSep 20, 2026 · metrics 2.10.0
PyPI
orbi-build/orbi
Open-source (AGPL-3.0), self-hosted autonomous coding agent: label a GitHub Issue, get an independently reviewed, merged PR and a tagged release.
AGPL-3.0Sep 26, 2026 · metrics 2.10.0
Packagist
phpcfdi/sat-ws-descarga-masiva
Librería para usar el servicio web del SAT de Descarga Masiva
MITSep 20, 2026 · metrics 2.10.0
crates.io
dcjones/proseg
Probabilistic cell segmentation for in situ spatial transcriptomics
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist · npm
joaopaulolndev/filament-general-settings
Create really fast and easily general settings for your Laravel Filament project.
MITSep 21, 2026 · metrics 2.10.0
Go · PyPI
pulumi/pulumi-eks
A Pulumi component for easily creating and managing an Amazon EKS Cluster
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io · npm · PyPI
BoltzExchange/boltz-backend
Boltz Backend
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
SAP/go-hdb
SAP HANA Database Client for Go
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go · crates.io · npm
dylibso/observe-sdk
Continuous runtime observablity SDKs to monitor WebAssembly code.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
redhat-actions/buildah-build
GitHub Action to use 'buildah' to build a container image.
MITSep 20, 2026 · metrics 2.10.0
npm
benlesh/symbol-observable
Symbol.observable ponyfill
MITSep 23, 2026 · metrics 2.10.0
Go
temporalio/temporal-worker-controller
Manage the lifecycle of Temporal Workers
MITSep 19, 2026 · metrics 2.10.0
crates.io · npm
Autodesk/synthesis
A Robotics Simulator for Autodesk Fusion CAD Designs
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
adbayb/termost
📦 A framework to build your next CLI application: Get the most of your terminal 🚀
MITSep 25, 2026 · metrics 2.10.0
npm
binance/asymmetric-key-generator
This simple tool can be used to generate an RSA PKCS#8 or Ed25519 key pairs.
MITSep 20, 2026 · metrics 2.10.0
npm
nodejs/require-in-the-middle
Module to hook into the Node.js require function
MITSep 23, 2026 · metrics 2.10.0