Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,608
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
fintech-sdk/unit-go
A complete, production-grade Go client for the Unit embedded banking API — applications, customers, accounts, cards, payments, transactions, counterparties, repayments, recurring payments, check deposits, check payments, stop payments, chargebacks, statements, webhooks, events, tokens, institutions, authorizations, and sandbox simulation.
MITSep 19, 2026 · metrics 2.10.0
Go
fipe-api/go-sdk
Zero-dependency Go SDK for the FIPE API — average vehicle prices in Brazil (cars, motorcycles, trucks), updated monthly.
MITSep 18, 2026 · metrics 2.10.0
npm
fischer-jan/zeitstempel-react
A lightweight TypeScript library for the full OpenTimestamps lifecycle: stamp, upgrade, and verify -- with optional React components. Works in browsers and Node.js. Zeitstempel is German for "timestamp". This is the TypeScript sibling of zeitstempel, a Rust CLI for the same purpose.
MITSep 20, 2026 · metrics 2.10.0
Go
fivetwenty-io/proxmox-cli
Proxmox CLI (PVE, PBS, PDM)
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
flare-foundation/tee-relay-client
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Go
flevanti/airflow-migrator
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
—
floodryan/inclementpatch
disassembly of Pokémon Emerald
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
flow-php/monolog-telemetry-bridge
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Packagist
flow-php/psr3-telemetry-bridge
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
flowerinthenight/longsub
Package for lengthy subscriptions for AWS SQS and GCP Pub/Sub.
MITSep 19, 2026 · metrics 2.10.0
Go
flowexec/vault
A Go package for secure secret storage with multiple encryption backends
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
flushentitypacket/golz4
Golang interface to LZ4 compression
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
flywindy/o11y
Observability package for Go services
MITSep 19, 2026 · metrics 2.10.0
Go
fmidev/smartmet-icondownloader
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
fmotalleb/go-cpanel
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
fmotalleb/go-scheduler
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
npm
fntechgit/summit-registration-lite
Summit Registration Modal Widget
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
fomothy/denly.xyz
No repository description published.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
footprintjs/explainable-ui
Themeable React components for visualizing FootPrint pipeline execution
No licenseSep 18, 2026 · metrics 2.10.0
Go
forbole/cosmos-exporter
No repository description published.
Custom licenseSep 24, 2026 · metrics 2.10.0
Go
forkkit/dbq
Zero boilerplate database operations for Go
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
forkkit/machine-1
Machine is a zero dependency library for highly concurrent Go applications. It is inspired by errgroup.Group with extra bells & whistles
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
form8ion/commitlint-config
shareable config for commitlint
MITSep 18, 2026 · metrics 2.10.0
npm
form8ion/javascript-core
core logic for form8ion tools related to JavaScript, like javascript-scaffolder and lift-javascript
MITSep 18, 2026 · metrics 2.10.0
Go
fornellas/rrb
Re-Run Build continuously build your projects based on source file changes.
LGPL-2.1Sep 20, 2026 · metrics 2.10.0
Go
fornellas/slogxt
Terminal-optimized handlers and utilities extending Go's slog.
LGPL-2.1Sep 20, 2026 · metrics 2.10.0
npm
forumone/javascript
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
fourMs/micromotion
A Python toolbox for analysing human micromotion
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
foxzi/llm-translate
cli llm translator tool
MITSep 19, 2026 · metrics 2.10.0
Go
fpetkovski/kube-state-metrics
Add-on agent to generate and expose cluster-level metrics.
Apache-2.0Sep 20, 2026 · metrics 2.10.0