Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,099
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
Quantinuum/quantinuum-qircheck
Package to validate QIR
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
Query-farm-haybarn/haybarn-go-bindings
Low-level cgo bindings for Haybarn, an independent derived distribution of DuckDB (fork of duckdb/duckdb-go-bindings)
MITSep 19, 2026 · metrics 2.10.0
crates.io
Query-farm/vgi-rust
Rust port of the VGI worker SDK + example fixtures (DuckDB VGI protocol)
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
RaduBerinde/axisds
One-dimensional data structures
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
RaduBerinde/btreemap
BTree map based on github.com/google/btree
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
RebeccaStevens/ts-declaration-location
Determine where a ts type declaration comes from
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
crates.io
Redmomn/silk-codec
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
RezaKargar/go-igbinary
A pure Go decoder for PHP's igbinary serialization format. Zero external dependencies for the core decoder.
MITSep 19, 2026 · metrics 2.10.0
Go
RichieSams/fxt
A library for creating Fuschia Tracing System (FXT) files
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
Riete/supervisord
go supervisord client
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
RoboFinSystems/robosystems-python-client
Official Python client for the RoboSystems financial intelligence platform — accounting, financial reporting, and investment management over a knowledge graph API. Type-safe and async-ready, generated from the OpenAPI spec, with GraphQL reads and idempotent operation writes.
MITSep 18, 2026 · metrics 2.10.0
PyPI
RoboFinSystems/xbrlkit
Work with XBRL filings above Arelle: one parse, portable models
MITSep 18, 2026 · metrics 2.10.0
Go · PyPI
Runewardd/runeward
Governed execution cells for AI agents.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
S7R4nG3/terraform-resources
A native Golang list of Terraform resources within a deployment
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
SGNL-ai/adapter-framework
SGNL ingestion adapter framework
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
SOMUCHDOG/azb
manage ado work-items from CLI
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
SWAN-community/swift-go
Shared Web InFormaTion (SWIFT) - an open source cryptographically secure web solution for sharing information across domains implemented in Go
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
SableClient/matrix-rtc
No repository description published.
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
SagenKoder/go-openapi-exploration-mcp-server
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Go · npm
SaiMouli3/xtxt
Plain text that machines can read — a document format with images, tables, charts and typed records, in a file that still opens in any editor. Spec + 7 implementations.
MITSep 19, 2026 · metrics 2.10.0
Packagist
SanderMuller/boost-pipeline
A drip-feed verification pipeline as an MCP server: phases, steps, and a cursor the agent cannot move.
Custom licenseSep 18, 2026 · metrics 2.10.0
Packagist
SanderMuller/boost-skills
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Packagist
SanderMuller/project-boost-laravel
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
crates.io
SecurityRonin/lzo
GPL-free, safe, no_std pure-Rust LZO1X decompressor — decode lzo1x_1 / lzo1x_999 streams (lzop, kernel/initramfs, btrfs, liblzo2) with zero C, zero dependencies, and #![forbid(unsafe_code)]; validated against liblzo2 and fuzz-hardened against malicious input.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
SemRels/analyzer-conventional
Conventional commits analyzer for SemRel
Custom licenseSep 20, 2026 · metrics 2.10.0
Go
Semior001/releaseit
Tool for generating release notes by extracting information from remote resources
MITSep 19, 2026 · metrics 2.10.0
Packagist
Setono/payum-quickpay
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
Go
Shelnutt2/yamux
Fork of hashicorp/yamux with a js/wasm shutdown spin fix
MPL-2.0Sep 20, 2026 · metrics 2.10.0
Go · npm
ShieldedDotDev/shieldeddotdev
The Shielded.dev Server App
MITSep 19, 2026 · metrics 2.10.0
PyPI
SiddiqSoft/restcl
Focused REST client for modern C++
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0