Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
51,940
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
391B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
RubyGems
voxpupuli/puppet-rabbitmq
RabbitMQ Puppet Module
Apache-2.0Jul 26, 2026 · metrics 2.5.0
Go
warreth/gPhotos2Immich
Google photo albums (link) sync to Immich
AGPL-3.0Jul 25, 2026 · metrics 2.5.0
Go
whywaita/myshoes
Auto-scaling VirtualMachine runner 🏃 for GitHub Actions
MITJul 21, 2026 · metrics 2.5.0
npm
winduum/winduum
🎨 Modern, modular, small modest CSS component framework built on top of TailwindCSS
MITJul 18, 2026 · metrics 2.5.0
Packagist · npm
yireo/Yireo_GoogleTagManager2
No repository description published.
OSL-3.0Jul 28, 2026 · metrics 2.5.0
Go
yusufpapurcu/wmi
WMI for Go
MITJul 28, 2026 · metrics 2.5.0
Packagist
Adyen/adyen-magento2
Adyen Payment plugin for Magento2
MITJul 14, 2026 · metrics 2.5.0
npm
Bunlong/next-qrcode
React hooks for generating QRCode for your next React apps.
MITJul 24, 2026 · metrics 2.5.0
NuGet
Krusen/BencodeNET
.NET library for encoding/decoding bencode and reading/writing torrent files
UnlicenseJul 20, 2026 · metrics 2.5.0
PyPI
SukramJ/aiohomematic
Python 3 Interface to interact with HomeMatic devices
MITAug 1, 2026 · metrics 2.5.0
Packagist
SymfonyTest/SymfonyConfigTest
No repository description published.
MITJul 30, 2026 · metrics 2.5.0
crates.io
XAMPPRocky/fluent-templates
Easily add Fluent to your Rust project.
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Go
agntcy/dir
Distributed Announce and Discovery of Multi-Agentic-Systems
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
antfu-collective/package-manager-detector
Package manager detector
MITJul 29, 2026 · metrics 2.5.0
Maven
blackears/svgsalamander
No repository description published.
Custom licenseJul 17, 2026 · metrics 2.5.0
npm · crates.io
claudioemmanuel/squeez
Hook-based token compressor for 5 AI CLI hosts (Claude Code, Copilot CLI, OpenCode, Gemini CLI, Codex CLI). Up to 95% bash compression, signature-mode for code reads, cross-call dedup, MCP server, self-teaching protocol. Zero runtime deps.
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Packagist
clue/commander
Finally a sane way to register available commands and arguments and match your command line in PHP
MITJul 25, 2026 · metrics 2.5.0
Go
defilantech/llmkube
Kubernetes operator for self-hosted LLM inference across a heterogeneous GPU fleet: NVIDIA CUDA, AMD Vulkan, and Apple Silicon Metal. Runtimes: llama.cpp, vLLM, TGI, mlx-server. Multi-GPU sharding, model caching, OpenAI-compatible endpoints. Apache-2.0, run across homelab and on-prem fleets, actively developed.
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Maven
download-maven-plugin/download-maven-plugin
These are a few plugins to help maven user to download different files on different protocol in part of maven build.
Apache-2.0Jul 30, 2026 · metrics 2.5.0
Maven
dropwizard-jobs/dropwizard-jobs
Scheduling / Quartz integration for Dropwizard
Apache-2.0Jul 20, 2026 · metrics 2.5.0
crates.io
dtolnay/ghost
Define your own PhantomData
Apache-2.0Jul 19, 2026 · metrics 2.5.0
npm
empirical-run/empirical
Test and evaluate LLMs and model configurations, across all the scenarios that matter for your application
MITJul 15, 2026 · metrics 2.5.0
npm
fastify/fastify-reply-from
fastify plugin to forward the current http request to another server
MITJul 23, 2026 · metrics 2.5.0
npm
forcedotcom/sfdx-core
No repository description published.
BSD-3-ClauseJul 14, 2026 · metrics 2.5.0
PyPI
gbouras13/phold
Phage Annotation using Protein Structures
MITJul 17, 2026 · metrics 2.5.0
crates.io
gpu-mode/popcorn-cli
No repository description published.
MITJul 17, 2026 · metrics 2.5.0
—
hafenkran/duckdb-bigquery
Integrates DuckDB with Google BigQuery, allowing direct querying and management of BigQuery datasets
MITJul 30, 2026 · metrics 2.5.0
npm · Maven · RubyGems
intercom/intercom-react-native
React Native wrapper to bridge our iOS and Android SDK
MITJul 21, 2026 · metrics 2.5.0
Go
kyochikuto/sing-box-plus
Sing-Box + Enhancements
No licenseJul 14, 2026 · metrics 2.5.0
npm
nodejs/import-in-the-middle
Like `require-in-the-middle`, but for ESM import
Apache-2.0Aug 4, 2026 · metrics 2.5.0