Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,089
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
397B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist
amphp/parser
A generator parser to make streaming parsers simple.
MITJul 22, 2026 · metrics 2.5.0
Go
containerd/continuity
A transport-agnostic, filesystem metadata manifest system
Apache-2.0Jul 30, 2026 · metrics 2.5.0
npm
danivek/json-api-serializer
Node.js/browser framework agnostic JSON API (http://jsonapi.org/) serializer.
MITAug 1, 2026 · metrics 2.5.0
—
ektrah/libsodium-core
libsodium for .NET - A secure cryptographic library
MITJul 18, 2026 · metrics 2.5.0
PyPI
facebookresearch/iopath
A python library that provides common I/O interface across different storage backends.
MITAug 4, 2026 · metrics 2.5.0
RubyGems · npm
geoblacklight/geoblacklight
Discovery platform for maps & GIS data.
Custom licenseJul 15, 2026 · metrics 2.5.0
Packagist
illuminate/filesystem
[READ ONLY] Subtree split of the Illuminate Filesystem component (see laravel/framework)
MITJul 14, 2026 · metrics 2.5.0
Go
iotames/v2raypool
v2ray proxy pool: 同时运行多个v2ray代理，暴露多个本地IP端口，组成简单的IP代理池。
MITJul 16, 2026 · metrics 2.5.0
Go · npm · PyPI
jentic/jentic-one
Self-hosted API execution layer that sits between your agent and the outside world. Your agent says what it wants to do. Jentic One handles the how — finding the right API, injecting credentials at runtime, and brokering the request
Apache-2.0Jul 31, 2026 · metrics 2.5.0
Hex
jvoegele/external_service
Elixir library for safely using any external service or API using automatic retry with rate limiting and circuit breakers.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
crates.io
kata-containers/cgroups-rs
Native Rust library for managing control groups under Linux
Custom licenseJul 17, 2026 · metrics 2.5.0
Go
katzenpost/katzenpost
Katzenpost is a free and open source software project dedicated to researching and developing mix network protocols
AGPL-3.0Jul 15, 2026 · metrics 2.5.0
PyPI
mggg/gerrychain
Use MCMC to analyze districting plans and gerrymanders
Custom licenseJul 14, 2026 · metrics 2.5.0
npm · crates.io
mlx-node/mlx-node
No repository description published.
MITAug 3, 2026 · metrics 2.5.0
crates.io · npm · PyPI
neovim/tree-sitter-vimdoc
Tree-sitter parser for Vim help files
Apache-2.0Jul 25, 2026 · metrics 2.5.0
PyPI
nvidia/nvimagecodec
A nvImageCodec library of GPU- and CPU- accelerated codecs featuring a unified interface
Apache-2.0Jul 18, 2026 · metrics 2.5.0
npm
octokit/types.ts
Shared TypeScript definitions for Octokit projects
MITAug 4, 2026 · metrics 2.5.0
crates.io
paolobarbolini/rusty-s3
Simple pure Rust AWS S3 Client following a Sans-IO approach
BSD-2-ClauseJul 21, 2026 · metrics 2.5.0
PyPI
python-hyper/brotlicffi
Python bindings to the Brotli compression library
MITJul 21, 2026 · metrics 2.5.0
Go
quay/claircore
foundation modules for scanning container packages and reporting vulnerabilities
Apache-2.0Jul 22, 2026 · metrics 2.5.0
RubyGems
ruby/bigdecimal
Arbitrary-precision decimal floating-point number library for Ruby
Custom licenseJul 16, 2026 · metrics 2.5.0
NuGet
shinyorg/templates
dotnet CLI & Visual Studio Templates
MITJul 27, 2026 · metrics 2.5.0
crates.io
solana-foundation/txtx
Terraform for web3. Reproducible deployments and secure operations for Bitcoin, Ethereum and Solana.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
RubyGems
typhoeus/ethon
Very simple libcurl wrapper.
MITJul 17, 2026 · metrics 2.5.0
npm
zio/zio-aws
Low level ZIO interface for the full AWS
Apache-2.0Jul 24, 2026 · metrics 2.5.0
PyPI
BennyThadikaran/NseIndiaApi
Unofficial Python Api for NSE India stock exchange
GPL-3.0Jul 18, 2026 · metrics 2.5.0
PyPI
CourtBouillon/pydyf
A low-level PDF creator
BSD-3-ClauseJul 21, 2026 · metrics 2.5.0
crates.io
L4z3x/mal-cli
Terminal Interface for the official MyAnimeList api.
MITJul 26, 2026 · metrics 2.5.0
PyPI
LoLei/razer-cli
CLI for configuring Razer devices
GPL-3.0Jul 19, 2026 · metrics 2.5.0
npm
OriginProtocol/origin-dollar
OUSD and OETH are stablecoins that passively accrue yield while you are holding it
MITJul 22, 2026 · metrics 2.5.0