Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,242
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
incubateur-ademe/nosgestesclimat
Estimez votre empreinte climat - le modèle de calcul
MITSep 19, 2026 · metrics 2.10.0
PyPI
ModelZoo/ModelZoo
A Scaffold to help you build Deep Learning Model much more easily, implemented with TensorFlow 2.0
MITSep 20, 2026 · metrics 2.10.0
npm
contentful/apps
Apps on the Contentful Marketplace and resources to build them
No licenseSep 19, 2026 · metrics 2.10.0
Go
kOlapsis/shm
🛡️ Privacy-first, Agnostic Telemetry for Self-Hosted Software.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
miloschuman/yii2-highcharts
Highcharts widget for Yii 2 Framework
MITSep 19, 2026 · metrics 2.10.0
crates.io
pangenome/seqwish
alignment to variation graph inducer
MITSep 19, 2026 · metrics 2.10.0
npm
ui-router/angular-hybrid
Upgrade an ng1 UI-Router app to a ng1+ng2 hybrid using ng-upgrade
MITSep 20, 2026 · metrics 2.10.0
crates.io
vitiral/strfmt
rust library for formatting dynamic strings
MITSep 21, 2026 · metrics 2.10.0
crates.io
IyesGames/iyes_progress
Bevy plugin to help track progress and perform state transitions
Custom licenseSep 21, 2026 · metrics 2.10.0
Go
antham/chyle
Changelog generator : use a git repository and various data sources and publish the result on external services
MITSep 19, 2026 · metrics 2.10.0
crates.io · Go
enclaver-io/enclaver
Open source toolkit created to enable easy adoption of software enclaves
Apache-2.0Sep 25, 2026 · metrics 2.10.0
Go
legostin/cull
Interactive TUI disk space analyzer
MITSep 26, 2026 · metrics 2.10.0
RubyGems
westonganger/paper_trail-association_tracking
Plugin for the PaperTrail gem to track and reify associations
MITSep 20, 2026 · metrics 2.10.0
crates.io
payjoin/rust-payjoin
Supercharged batching to save you fees and preserve your privacy
No licenseSep 26, 2026 · metrics 2.10.0
Go
DeRuina/timberjack
Timberjack is a Go log rolling library with support for size-based, time-based, and manual rotation.
MITSep 20, 2026 · metrics 2.10.0
PyPI
IBM/cloud-pak-deployer
Configuration-based installation of OpenShift and Cloud Pak for Data/Integration/Watson AIOps/Business Automation on various private and public cloud infrastructure providers. Deployment attempts to achieve the end-state defined in the configuration. If something fails along the way, you only need to restart the process to continue the deployment.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
aaronjmars/web3-research-mcp
Deep Research for crypto - free & fully local
MITSep 20, 2026 · metrics 2.10.0
crates.io
alloy-rs/trie
Fast Merkle-Patricia Trie (MPT) state root calculator and proof generator for prefix-sorted nibbles
Apache-2.0Sep 24, 2026 · metrics 2.10.0
npm
langfuse/langfuse-js
🪢 Langfuse JS/TS SDKs - Instrument your LLM app and get detailed tracing/observability. Works with any LLM or framework
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
d-e-s-o/test-log
A replacement of the #[test] attribute that initializes logging and/or tracing infrastructure before running tests.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
go-text/typesetting
High quality text shaping in pure Go.
Custom licenseSep 23, 2026 · metrics 2.10.0
npm
joshforisha/open-simplex-noise
OpenSimplex noise for TypeScript/JavaScript
UnlicenseSep 24, 2026 · metrics 2.10.0
Go
nix-community/go-nix
Elements of Nix re-implemented as Go libraries [maintainer=@flokli]
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
anaskhan96/go-password-encoder
Go package to encode (with random generated salt) and verify passwords
MITSep 20, 2026 · metrics 2.10.0
npm
dhicoc/dsh-reverse-skill
Complete reverse-skill (87 SKILL.md) as a DeepSeek Harness (dsh) Cordis plugin — reverse engineering, authorized pentesting and security research skill pack.
MITSep 21, 2026 · metrics 2.10.0
npm
geomatico/maplibre-cog-protocol
Display Cloud Optimized GeoTIFFs, satellite imagery and elevation models directly in MapLibre GL JS
MITSep 19, 2026 · metrics 2.10.0
npm · Packagist
johnbillion/wp-json-schemas
JSON schemas for WordPress PHP objects and REST API responses
MITSep 24, 2026 · metrics 2.10.0
npm
just-every/mcp-read-website-fast
Quickly reads webpages and converts to markdown for fast, token efficient web scraping
MITSep 20, 2026 · metrics 2.10.0
Go
Hostzero-GmbH/keycloak-operator
Kubernetes operator for Keycloak. Manage realms, clients, users, roles, and identity providers as code. Features GitOps support, automatic secret sync, drift detection, and works with Keycloak 20-26+.
MITSep 20, 2026 · metrics 2.10.0
PyPI
lextudio/pysnmp
Python SNMP library
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0