Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,130
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
Usefused/cli
Fused CLI - From discovery to generation of unified SDK of third-party services you integrate with. Visit https://usefused.com
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
VWS-Python/vws-test-fixtures
Test fixtures for VWS tools
MITSep 18, 2026 · metrics 2.10.0
PyPI
VanshBhardwaj1945/FlowSec
CI/CD pipeline security analyzer — scans GitHub Actions workflows for attack vectors and maps findings to MITRE ATT&CK
MITSep 18, 2026 · metrics 2.10.0
PyPI · crates.io · npm
Vauxoo/ruff-odoo
An extremely fast Python linter and code formatter, written in Rust.
MITSep 18, 2026 · metrics 2.10.0
npm
VillainsRule/wwws
a worldwide (node, bun, & deno) websocket socks5/h proxy implementation.
No licenseSep 18, 2026 · metrics 2.10.0
Go
VishalDalwadi/delta-go
A generic, reflection-based HTTP PATCH engine for Go structs.
MITSep 18, 2026 · metrics 2.10.0
Go · npm
VitruvianSoftware/devx
Supercharged local dev environment
MITSep 18, 2026 · metrics 2.10.0
npm
WFCD/worldstate-emitter
Super simple emitter for Warframe data
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
Warp-net/libp2p-camouflage-transport
libp2p transport wrapper that defeats Deep Packet Inspection
Custom licenseSep 19, 2026 · metrics 2.10.0
—
WildMix/Scribe
Content addressed git-like storage
MITSep 18, 2026 · metrics 2.10.0
Go
WoozyMasta/paa
Go implementation of the PAA texture format used in DayZ/Arma, with TexConvert-style config resolver, LZO/LZSS support, swizzle handling for normal maps.
MITSep 22, 2026 · metrics 2.10.0
Go · crates.io
YASSERRMD/barq-graphdb
Production-ready hybrid Graph+Vector DB for agentic AI.
MITSep 19, 2026 · metrics 2.10.0
npm
YUEEEEY/dsh-desktop-tools
dsh 环境管理插件（TypeScript）：安装即配备桌面窗口（Rust/Tauri 宿主自动获取）、运行时一键更新、平台兼容自动适配、DeepSeek 官方计费与工作区代码编辑器。
MITSep 20, 2026 · metrics 2.10.0
Go
YashVishwas/ixr
No repository description published.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
YehiaGewily/EnvGuardian
Git-native encrypted secret distribution for teams — access controlled by a reviewable file of public keys. ⚠️ Alpha, hardening in progress.
MITSep 20, 2026 · metrics 2.10.0
Go
YouSysAdmin/whoosh
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
YujiSuzuki/ai-sandbox-dkmcp
Secure AI sandbox for Claude Code / Gemini — hide secrets, enable cross-container access
MITSep 18, 2026 · metrics 2.10.0
—
YukiYasuda2718/schrodinger-bridge-sr-micrometeorology
No repository description published.
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
ZVN-DEV/yable
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
PyPI
ZengFLab/SURE
Building a single-cell transcriptome-based coordinate system
MITSep 17, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.AsyncEvents
Zero-allocation async event primitives for .NET. ValueTask-based AsyncEvent<T> with sequential and parallel invocation modes, source-generated dispatch, no reflection.
MITSep 20, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.Pipeline
Shared building block for pipeline-aware Roslyn source generators in the ZeroAlloc ecosystem. Zero allocation, compile-time wiring, Native AOT compatible.
MITSep 19, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.Serialisation
A zero-allocation serialisation library for .NET. IBufferWriter<byte>-based ISerializer<T> with Roslyn source generator — AOT-safe, no reflection, works with MemoryPack, MessagePack, and System.Text.Json.
MITSep 19, 2026 · metrics 2.10.0
NuGet
ZeroAlloc-Net/ZeroAlloc.StateMachine
Source-generated, zero-allocation finite state machines for .NET. Add [StateMachine] and [Transition] attributes to a partial class; the generator emits a TryFire switch expression with no heap allocation on the transition path. AOT-safe.
MITSep 19, 2026 · metrics 2.10.0
Go
ZhangYoungDev/dnscache-go
A production-ready DNS cache library for Go (Golang). Features async refreshing,TTL management, zero-latency lookups, and connection failover. Drop-in replacement for http.Transport.
MITSep 19, 2026 · metrics 2.10.0
Go
Zytekaron/gorl
A Go rate limiting library
MITSep 19, 2026 · metrics 2.10.0
Go · npm
a-novel-kit/golib
Shared Go libraries.
MITSep 17, 2026 · metrics 2.10.0
Go · npm
a-novel-kit/jwt
A modular JWT library for Go, based on IANA specifications.
MITSep 17, 2026 · metrics 2.10.0
Go · npm
a-novel/service-genai
Generative AI proxy, with cost ledger and crash safety baked in.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
a11delavar/lit-application
No repository description published.
MITSep 18, 2026 · metrics 2.10.0