Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
51,998
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
389B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
RubyGems
Codaisseur/terminal-notifier-guard
Mac OS X User Notifications for Guard
Custom licenseJul 28, 2026 · metrics 2.5.0
npm
ColorlibHQ/Activello
WordPress Bootstrap blog theme with doeznes of options using WordPress Customizer
No licenseJul 13, 2026 · metrics 2.5.0
Go
DataDog/ebpf-manager
This manager helps handle the life cycle of your eBPF programs
MITJul 30, 2026 · metrics 2.5.0
Go
DefangLabs/defang
Defang CLI. Develop Once, Deploy Anywhere. Take your app from Docker Compose to a secure and scalable deployment on your favorite cloud in minutes.
MITJul 24, 2026 · metrics 2.5.0
npm
GovTechSG/oobee
Oobee (formerly known as Purple A11y) is a customisable, automated web accessibility testing tool that allows software development teams to find and fix accessibility problems to improve persons with disabilities (PWDs) access to digital services.
MITAug 1, 2026 · metrics 2.5.0
npm
KarpelesLab/teamclaude
Multi-account Claude proxy with automatic quota-based rotation
MITJul 23, 2026 · metrics 2.5.0
npm
Kong/kongponents
🦍 Kong Vue Component Library
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm · Packagist
Relaticle/custom-fields
Filament plugin that allows to add dynamic, user-defined form fields, enhancing the customization and functionality of admin panels.
AGPL-3.0Jul 14, 2026 · metrics 2.5.0
crates.io
a1phyr/assets_manager
Conveniently load, cache, and reload external resources
Custom licenseAug 1, 2026 · metrics 2.5.0
—
baseflow/octo_image
A multifunctional Flutter image widget
MITJul 14, 2026 · metrics 2.5.0
Go
cyruzin/golang-tmdb
This is a Golang wrapper for working with TMDb API. It aims to support version 3.
MITJul 18, 2026 · metrics 2.5.0
—
dash-project/dash
DASH, the C++ Template Library for Distributed Data Structures with Support for Hierarchical Locality for HPC and Data-Driven Science
Custom licenseJul 27, 2026 · metrics 2.5.0
Hex
evadne/packmatic
Zipping on the fly — Generate downloadable Zip streams by aggregating File or URL Sources
No licenseJul 17, 2026 · metrics 2.5.0
PyPI
facelessuser/wcmatch
Wilcard File Name matching library
MITJul 17, 2026 · metrics 2.5.0
npm
gokapso/whatsapp-cloud-api-js
TypeScript client for the WhatsApp Cloud API
No licenseJul 17, 2026 · metrics 2.5.0
Go
googlecloudplatform/gcs-fuse-csi-driver
The Google Cloud Storage FUSE Container Storage Interface (CSI) Plugin.
Apache-2.0Jul 16, 2026 · metrics 2.5.0
npm
hashicorp/setup-packer
Run HashiCorp Packer as part of your GitHub Actions Workflow
Apache-2.0Jul 21, 2026 · metrics 2.5.0
—
hyprwm/hyprutils
Hyprland utilities library used across the ecosystem
BSD-3-ClauseJul 30, 2026 · metrics 2.5.0
npm
jotaijs/jotai-effect
A Jōtai utility package for reactive side-effects
MITJul 27, 2026 · metrics 2.5.0
npm
jsx-eslint/jsx-ast-utils
AST utility module for statically analyzing JSX
MITAug 4, 2026 · metrics 2.5.0
—
liuquanhao/moyu
墨鱼探针
No licenseJul 17, 2026 · metrics 2.5.0
npm
microsoft/powerbi-client-angular
Power BI Angular component. This library lets you embed Power BI report, dashboard, dashboard tile, report visual, or Q&A in your Angular application.
Custom licenseJul 21, 2026 · metrics 2.5.0
Go · npm
modernice/goes
goes is an event-sourcing framework for Go.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Packagist
phalcon/ide-stubs
Phalcon IDE Stubs
Custom licenseJul 17, 2026 · metrics 2.5.0
PyPI
phonopy/phono3py
A simulation package of phonon-phonon interaction related properties
BSD-3-ClauseJul 18, 2026 · metrics 2.5.0
Go
snnabb/Meridian
轻量级 Emby 反向代理管理面板 Apple TV 风格 UI
MITJul 25, 2026 · metrics 2.5.0
Hex
spreedly/kaffe
An opinionated Elixir wrapper around brod, the Erlang Kafka client, that supports encrypted connections to Heroku Kafka out of the box.
MITJul 17, 2026 · metrics 2.5.0
Packagist
staabm/side-effects-detector
Analyzes php-code for side-effects.
MITJul 22, 2026 · metrics 2.5.0
Packagist · npm
symfony/ux-live-component
Live components for Symfony
MITJul 15, 2026 · metrics 2.5.0
Maven
traccar/traccar-client
Traccar Client app
Apache-2.0Jul 19, 2026 · metrics 2.5.0