Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,030
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
392B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
davidcalhoun/tle.js
🛰️ Satellite TLE tools in JavaScript: get lat/lon of satellites, get look angles, plot orbit lines, extract individual TLE elements, etc
MITJul 30, 2026 · metrics 2.5.0
—
dolthub/doltlite
DoltLite - Version Controlled SQLite
Custom licenseJul 14, 2026 · metrics 2.5.0
Packagist
franbarbalopez/mirror
Mirror is an elegant user impersonation package for Laravel. It allows administrators to seamlessly log in as other users to troubleshoot issues, provide support, or test user experiences
MITJul 15, 2026 · metrics 2.5.0
npm
globalbrain/sefirot
Global Brain Design System.
MITJul 18, 2026 · metrics 2.5.0
npm
jmagly/aiwg
Cognitive architecture for AI-augmented software development. Specialized agents, structured workflows, and multi-platform deployment. Claude Code · Codex · Copilot · Cursor · Factory · Warp · Windsurf.
MITJul 17, 2026 · metrics 2.5.0
npm
jshttp/fresh
HTTP request freshness testing
MITAug 4, 2026 · metrics 2.5.0
npm
junkurihara/jscu
JavaScript cryptographic utilities for crypto-suite compatibility including PEM/X509/JWK converter.
MITJul 17, 2026 · metrics 2.5.0
crates.io · npm
kasper9n/cpc
Text calculator with support for units and conversion
AGPL-3.0Aug 3, 2026 · metrics 2.5.0
npm
nest-modules/ioredis
:see_no_evil: :hear_no_evil: :speak_no_evil: A ioredis module for Nest framework (node.js)
MITAug 1, 2026 · metrics 2.5.0
—
plengauer/opentelemetry-bash
No repository description published.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
PyPI
pydantic/logfire-mcp
The Logfire MCP Server is here! :tada:
MITJul 13, 2026 · metrics 2.5.0
Maven
quarkusio/quarkus-platform
Quarkus Platform aggregates extensions from Quarkus Core and those developed by the community into a single compatible and versioned set that application developers can reference from their applications to align the dependency versions
Apache-2.0Jul 30, 2026 · metrics 2.5.0
Go
rabbitmq/messaging-topology-operator
RabbitMQ messaging topology operator
MPL-2.0Jul 17, 2026 · metrics 2.5.0
Packagist
revoltify/subscriptionify
Feature-based subscription management for Laravel
MITJul 23, 2026 · metrics 2.5.0
crates.io
shuhuiluo/uniswap-v3-sdk-rs
Opinionated Rust implementation of the Uniswap V3 SDK with a focus on readability and performance
MITJul 24, 2026 · metrics 2.5.0
Go
soypat/lneto
Userspace networking library. HTTP/TCP/IP/Ethernet/RMII/MDIO/UDP/NTP/DHCP/DNS blabla. Runs on a couple kB of RAM
BSD-3-ClauseJul 22, 2026 · metrics 2.5.0
Hex
team-alembic/ash_authentication
The Ash Authentication framework
Custom licenseJul 17, 2026 · metrics 2.5.0
—
trailofbits/uthenticode
A cross-platform library for verifying Authenticode signatures
MITJul 21, 2026 · metrics 2.5.0
crates.io
truce-audio/truce
Cross-platform audio and MIDI plugin development framework in Rust
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
vuetifyjs/0
0️⃣ Composable UI engine for Vue. Build complex interfaces with reusable state, logic, and primitives—without being locked into components or styles.
Custom licenseJul 17, 2026 · metrics 2.5.0
PyPI
zeroasiccorp/umi
Universal Memory Interface (UMI)
Apache-2.0Jul 19, 2026 · metrics 2.5.0
npm · PyPI
Aurorastation/Aurora.3
The code for Aurorastation's new base, forked from Baystation12.
AGPL-3.0Jul 20, 2026 · metrics 2.5.0
npm
DevExpress/devextreme-react
[MIGRATED] See https://github.com/DevExpress/DevExtreme/tree/HEAD/packages/devextreme-react
MITJul 26, 2026 · metrics 2.5.0
PyPI
Polymarket/py-clob-client-v2
No repository description published.
MITJul 31, 2026 · metrics 2.5.0
npm
aitjcize/esp32-photoframe
Feature-rich firmware for ESP32-based e-paper displays with superior image quality.
MITJul 14, 2026 · metrics 2.5.0
crates.io
amPerl/egui-phosphor
Phosphor icons for egui
Apache-2.0Jul 22, 2026 · metrics 2.5.0
npm · Packagist
centreon/centreon
Centreon is a network, system and application monitoring tool. Centreon is the only AIOps Platform Providing Holistic Visibility to Complex IT Workflows from Cloud to Edge.
Apache-2.0Jul 14, 2026 · metrics 2.5.0
PyPI
clarketm/mergedeep
A deep merge function for 🐍.
MITJul 21, 2026 · metrics 2.5.0
Go
drogers0/gh-image
A gh CLI extension that uploads attachments to GitHub from the command line
MITJul 19, 2026 · metrics 2.5.0
npm
flmnt/graphemer
Unicode character splitter
MITAug 4, 2026 · metrics 2.5.0