Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,068
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
GoCodeAlone/workflow-plugin-agent
AI agent primitives for workflow apps
MITSep 18, 2026 · metrics 2.10.0
crates.io · NuGet
Goob-Station/GoobToolboxNewHorizons
Robust multiplayer game engine, used by Space Station 14
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
GreenmaskIO/storages
No repository description published.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm · Go · crates.io
Grunt-MVT/bbs
BBS+ Signature FFI wrapper
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
RubyGems
Gusto/rubocop-gusto
Gusto's custom Rubocop as Open Source Software
MITSep 18, 2026 · metrics 2.10.0
Packagist
HDVinnie/laravel-joypixel-emojis
Laravel package to make it easy to use the modern emojis from joypixels
MITSep 17, 2026 · metrics 2.10.0
Packagist
HDVinnie/laravel-security-headers
Security related headers to HTTP responses in Laravel
No licenseSep 17, 2026 · metrics 2.10.0
crates.io
HackerOS-Linux-System/hammer
A package manager for atomic updating of installation packages. Designed for HackerOS Atomic.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
HaohanHe/Mujibot
Lightweight AI Assistant for low-resource ARM devices
MITSep 19, 2026 · metrics 2.10.0
Go · npm
HarjjotSinghh/reinstate
Find, resume, and hand off Claude Code and Codex sessions across machines — encrypted, your own bucket.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
HaukeBartsch/sdcm
Sort DICOM files into folders
GPL-3.0Sep 20, 2026 · metrics 2.10.0
—
HeliumProject/rapidjson
Mirror of http://code.google.com/p/rapidjson
MITSep 20, 2026 · metrics 2.10.0
npm · crates.io
Heluo0991/cute-dsh-tui
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
—
Hexalith/Hexalith
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
HizKz/codex-history
Local-first TUI for browsing, searching, and resuming Codex CLI conversations
MITSep 19, 2026 · metrics 2.10.0
Go
Hochfrequenz/adtler
🦅adtler is a Go client for the SAP ADT API
MITSep 17, 2026 · metrics 2.10.0
Go
HongYan789/invoke
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
Go
Hongssd/marketdata
marketdata
No licenseSep 19, 2026 · metrics 2.10.0
PyPI · Go
HyukjinKwon/adbc-driver-spark
Apache Arrow ADBC driver for Apache Spark Connect (Go core, C-ABI shared library, Python DBAPI). Arrow-native, multi-language.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
IBM/ibm-cos-sdk-python-s3transfer
ibm-cos-sdk-python-s3transfer
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
IGVF-DACC/snovault
The SnoVault general purpose hybrid object-relational database
MITSep 20, 2026 · metrics 2.10.0
npm
IdealystIO/idealyst-framework
No repository description published.
No licenseSep 17, 2026 · metrics 2.10.0
Go
Infinage/microfix
A modern, lightweight FIX protocol testing tool written in Go
MITSep 17, 2026 · metrics 2.10.0
Packagist
Innmind/io
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
InsideGallery/core
Shared Go infrastructure library for InsideGallery projects, providing reusable packages for app bootstrap, databases, logging, metrics, security, profiling, and utilities.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go · npm
IodeSystems/gwag
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
npm
IvanMurzak/AI-Game-Dev-CLI-Core
Shared TypeScript CLI core for the AI Game Dev engine CLIs (Unity/Unreal/Godot) — npm package @baizor/gamedev-cli-core, published via npm Trusted Publishing (OIDC).
MITSep 17, 2026 · metrics 2.10.0
Go
J3nnaAI/mesh
A decentralized P2P infrastructure for any service or agent to discover, authenticate, and coordinate. Built in Go with zero-trust cryptography, mesh enables autonomous units to form secure, self-verifying networks without central oversight.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
JBZoo/Toolbox-Dev
Package includes tools to debug and gathering stats for all JBZoo projects.
MITSep 18, 2026 · metrics 2.10.0
npm · Maven
Jahia/jcontent
JContent Module for Jahia DX. This module provides a backend UI for a headless usage scenario of Jahia DX.
MITSep 18, 2026 · metrics 2.10.0