Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,073
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
396B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
NuGet
Wsm2110/Faster.Map
Faster.Map — A blazing-fast, memory-efficient HashMap library for .NET. Featuring SIMD-optimized DenseMap, lock-free CMap, and high-performance BlitzMap implementations designed for extreme speed, scalability, and low memory overhead. Ideal for real-time systems, caching engines, and high-density data workloads.
MITJul 25, 2026 · metrics 2.5.0
npm
agent-messenger/agent-messenger
Messenger automation CLI & SDK for AI agents
No licenseJul 16, 2026 · metrics 2.5.0
Go
akshatdalton/harbor-cli
Official Harbor CLI
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
autobrr/omegabrr
Omegabrr transforms monitored shows, movies, books and music from arrs into autobrr filters. It also supports adding titles from custom lists to autobrr filters.
MITJul 27, 2026 · metrics 2.5.0
Packagist
beste/firebase-bundle
A Symfony Bundle for the Firebase PHP Admin SDK
MITJul 22, 2026 · metrics 2.5.0
npm
bogdanp/koyo
A web development toolkit for Racket.
No licenseJul 17, 2026 · metrics 2.5.0
crates.io
datafusion-contrib/datafusion-postgres
Postgres protocol frontend for DataFusion
Apache-2.0Jul 19, 2026 · metrics 2.5.0
npm
dcostenco/prism-coder
Persistent memory + local AI for coding agents. 2B–27B open-weight LLM fleet, cross-session Mind Palace, cognitive routing, L3 grounding verifier, multi-agent Hivemind. Works with Claude Code, Cursor, VS Code. Offline-first, HIPAA-ready. Free tier included.
Apache-2.0Jul 18, 2026 · metrics 2.5.0
npm
delucis/astro-auto-import
Auto-import components in Astro projects
No licenseJul 18, 2026 · metrics 2.5.0
npm
garudex-labs/caracal
🐾 Authority, not credentials, for AI agents: policy-approved actions, delegation that can only narrow, instant revocation, tamper-evident audit.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
RubyGems
github/pages-health-check
Checks your GitHub Pages site for common DNS configuration issues
MITJul 24, 2026 · metrics 2.5.0
npm
j9t/html-minifier-next
Highly effective, super-configurable, well-tested web page minifier (enhanced successor to HTML Minifier)
MITJul 25, 2026 · metrics 2.5.0
NuGet
jbevain/mono.reflection
Some useful reflection helpers, including an IL disassembler.
No licenseJul 22, 2026 · metrics 2.5.0
crates.io
lerouxrgd/datachannel-rs
Rust wrappers for libdatachannel
MPL-2.0Jul 29, 2026 · metrics 2.5.0
npm
lodash-archive/lodash-cli
The Lodash command-line interface.
Custom licenseJul 25, 2026 · metrics 2.5.0
Go
metal-pod/go-ipam
golang grpc service and library for ip address management
MITJul 17, 2026 · metrics 2.5.0
PyPI
nessshon/tonutils
Python SDK for TON Blockchain — wallets, contracts, and more via ADNL and HTTP APIs.
MITJul 22, 2026 · metrics 2.5.0
PyPI
nirizr/rematch
REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.
GPL-3.0Aug 2, 2026 · metrics 2.5.0
npm
node-unicode/node-unicode-data
JavaScript-compatible Unicode data generator. Arrays of code points, arrays of symbols, and regular expressions for every Unicode version’s categories, scripts, blocks, and properties — neatly packaged into a separate npm package per Unicode version.
MITJul 17, 2026 · metrics 2.5.0
Packagist
putyourlightson/craft-blitz
Intelligent static page caching for creating lightning-fast sites with Craft CMS.
Custom licenseJul 16, 2026 · metrics 2.5.0
Hex
satoren/y_ex
Yjs port for Elixir
MITJul 17, 2026 · metrics 2.5.0
Packagist
shipmonk-rnd/phpstan-rules
📏 Various extra strict PHPStan rules we found useful in ShipMonk.
MITJul 17, 2026 · metrics 2.5.0
npm
sindresorhus/import-local
Let a globally installed package use a locally installed version of itself if available
MITAug 4, 2026 · metrics 2.5.0
npm
sindresorhus/merge-descriptors
Merge objects using their property descriptors
MITAug 4, 2026 · metrics 2.5.0
Maven
vert-x3/vertx-rx
Reactive Extensions for Vert.x
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
xquik-dev/x-twitter-scraper
Xquik agent Skill for REST, OAuth-first MCP, webhooks, exports, tweet search, follower data, monitoring, and confirmation-gated publishing. Not affiliated with X Corp.
MITJul 17, 2026 · metrics 2.5.0
—
JuliaPhysics/DynamicQuantities.jl
Efficient and type-stable physical quantities in Julia
Apache-2.0Jul 26, 2026 · metrics 2.5.0
Go
NVIDIA/gontainer
Simple but powerful dependency injection container for Go projects!
Apache-2.0Jul 31, 2026 · metrics 2.5.0
PyPI
ROCm/mori
Modular RDMA Interface
MITJul 22, 2026 · metrics 2.5.0
npm
SAP/open-ux-tools
Enable community collaboration to jointly promote and facilitate best in class tooling capabilities
Apache-2.0Jul 20, 2026 · metrics 2.5.0