Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,110
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
397B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
RubyGems
benbalter/jekyll-relative-links
A Jekyll plugin to convert relative links to markdown files to their rendered equivalents
MITJul 17, 2026 · metrics 2.5.0
Maven
cadence-workflow/cadence-java-client
Java framework for Cadence Workflow Service
Apache-2.0Jul 21, 2026 · metrics 2.5.0
Packagist
cakephp/orm
[READ-ONLY] A flexible, lightweight and powerful Object-Relational Mapper for PHP, implemented using the DataMapper pattern. This repo is a split of the main code that can be found in https://github.com/cakephp/cakephp
Custom licenseJul 14, 2026 · metrics 2.5.0
npm
canonical/react-components
A set of components based on Vanilla Framework
No licenseJul 20, 2026 · metrics 2.5.0
Go · npm · PyPI
dan6erbond/share-me
An image and video hosting platform for your server, with rich embed support and API.
MITJul 14, 2026 · metrics 2.5.0
Packagist
dcarbone/php-fhir
Tools for consuming data from a FHIR server with PHP
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Packagist
drupal/recommended-project
Project template for Drupal 8 projects with a relocated document root
GPL-2.0Jul 13, 2026 · metrics 2.5.0
Hex
elixir-mint/mint_web_socket
HTTP/1 and HTTP/2 WebSocket support for Mint 🌱
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
evolbioinfo/gotree
Gotree: a set of command line tools and an API to manipulate phylogenetic trees.
GPL-2.0Jul 22, 2026 · metrics 2.5.0
npm
fitzgen/glob-to-regexp
Convert a glob to a regular expression
No licenseAug 4, 2026 · metrics 2.5.0
Go
gaissmai/bart
The Balanced Routing Table is an adaptation of D. Knuth's ART algorithm and requires significantly less memory and has an even better lookup speed.
MITJul 17, 2026 · metrics 2.5.0
Go · npm
highflame-ai/zeroid
ZeroID: Autonomous Agent Identity Management System (AAIMS)
Apache-2.0Jul 16, 2026 · metrics 2.5.0
Go
jfrog/terraform-provider-project
Terraform provider to manage JFrog Projects
Apache-2.0Jul 31, 2026 · metrics 2.5.0
Go · npm · PyPI
link-society/flowg
Low Code / Visual Scripting log processing software
MITJul 19, 2026 · metrics 2.5.0
npm
lucasvieirasilva/nx-plugins
NX Plugins
MITJul 20, 2026 · metrics 2.5.0
Go · npm
mahendrapaipuri/grafana-dashboard-reporter-app
A Grafana plugin app to create PDF reports of dashboards
Apache-2.0Jul 27, 2026 · metrics 2.5.0
Go
metal-stack/metal-api
API to manage and control plane resources like machines, switches, operating system images, machine sizes, networks, IP addresses and more
AGPL-3.0Jul 18, 2026 · metrics 2.5.0
Go
mikestefanello/backlite
Type-safe, persistent, embedded task queues and background job runner w/ SQLite. Web monitoring UI included.
MITJul 31, 2026 · metrics 2.5.0
PyPI
mkdocs/mkdocs-click
An MkDocs extension to generate documentation for Click command line applications
Apache-2.0Jul 21, 2026 · metrics 2.5.0
Go
mrrobotogit/gostream
The most advanced BitTorrent engine and FUSE virtual filesystem for live streaming to your private Plex/Jellyfin library. Forget Real-Debrid.
GPL-2.0Jul 16, 2026 · metrics 2.5.0
Hex
oestrich/aino
An HTTP framework built on top of elli
MITJul 17, 2026 · metrics 2.5.0
—
processone/xmpp
Erlang/Elixir XMPP parsing and serialization library on top of Fast XML
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Go
ridgelinecyberdefence/vanguard
Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensics, disk collection, remote operations, and Velociraptor management. Works air-gapped, with automated timeline generation.
MITJul 20, 2026 · metrics 2.5.0
crates.io
rustls/webpki-roots
CA certificates for use with webpki
Apache-2.0Aug 4, 2026 · metrics 2.5.0
crates.io
smol-rs/async-fs
Async filesystem primitives
Apache-2.0Jul 19, 2026 · metrics 2.5.0
Packagist · npm
spiritix/php-chrome-html2pdf
A PHP library for converting HTML to PDF using Google Chrome
MITJul 29, 2026 · metrics 2.5.0
Go
tklauser/go-sysconf
sysconf and pathconf for Go, without using cgo
BSD-3-ClauseJul 28, 2026 · metrics 2.5.0
PyPI
ultralytics/thop
Profile PyTorch models for FLOPs and parameters, helping to evaluate computational efficiency and memory usage.
AGPL-3.0Jul 21, 2026 · metrics 2.5.0
Go
unpoller/unifi
Go Library (w/ structures) to grab data from a Ubiquiti UniFi Controller
MITJul 27, 2026 · metrics 2.5.0
npm
yunusga/postcss-sort-media-queries
PostCSS plugin to sort and combine media queries (mobile-first / desktop-first) with support for CSS Level 4 range syntax and nested media queries.
MITAug 3, 2026 · metrics 2.5.0