Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,461
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
399B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist
putyourlightson/craft-sprig
A reactive Twig component framework for Craft CMS.
MITJul 15, 2026 · metrics 2.5.0
npm · Maven · RubyGems
qonversion/react-native-sdk
React Native SDK for cross-platform in-app purchase and subscription infrastructure, revenue analytics, engagement automation, and integrations
No licenseJul 30, 2026 · metrics 2.5.0
Go
rancher/norman
APIs on APIs on APIs
Apache-2.0Jul 30, 2026 · metrics 2.5.0
npm
romgrk/color-bits
High-performance javascript color library
No licenseJul 15, 2026 · metrics 2.5.0
npm
sasjs/core
Macros for SAS® App Developers
MITAug 1, 2026 · metrics 2.5.0
npm · Maven
shimohq/react-native-prompt-android
A polyfill library for Alert.prompt on Android platform, working both on Android and iOS platform.
MITJul 22, 2026 · metrics 2.5.0
crates.io · npm
zowe/zowe-cli
Zowe CLI
EPL-2.0Jul 17, 2026 · metrics 2.5.0
Hex
CyrusNuevoDia/geocoder
The defacto geocoder for Elixir
MITJul 17, 2026 · metrics 2.5.0
crates.io
GyulyVGC/listeners
Cross-platform library to find out processes listening on network ports
MITAug 2, 2026 · metrics 2.5.0
—
JuliaIO/Formatting.jl
Deprecated. See README. (A Julia package to provide Python-like formatting support)
Custom licenseJul 21, 2026 · metrics 2.5.0
Packagist
LKDevelopment/hetzner-cloud-php-sdk
A PHP SDK for the Hetzner Cloud API
MITJul 15, 2026 · metrics 2.5.0
npm · Packagist
PrestaShop/hummingbird
Default theme for PrestaShop 9.1+
AFL-3.0Jul 13, 2026 · metrics 2.5.0
PyPI
airbytehq/airbyte-agent-connectors
🐙 Drop-in tools that give AI agents reliable, permission-aware access to external systems.
Custom licenseJul 17, 2026 · metrics 2.5.0
PyPI
airbytehq/airbyte-agent-sdk
🐙 Drop-in tools that give AI agents reliable, permission-aware access to external systems.
Custom licenseJul 17, 2026 · metrics 2.5.0
Hex
am-kantox/finitomata
FSM implementation generated from Mermaid/PlantUML textual representation
MITJul 17, 2026 · metrics 2.5.0
PyPI
amaranth-lang/amaranth-boards
Board definitions for Amaranth HDL
BSD-2-ClauseAug 4, 2026 · metrics 2.5.0
Go
ashishb/gabo
GitHub Actions Boilerplate Generator to avoid common pitfalls (https://ashishb.net/programming/common-pitfalls-of-github-actions/)
Apache-2.0Jul 31, 2026 · metrics 2.5.0
PyPI
calculix/ccx2paraview
CalculiX to Paraview converter (frd to vtk/vtu). Makes possible to view and postprocess CalculiX analysis results in Paraview. Generates Mises and Principal components for stress and strain tensors.
GPL-3.0Aug 4, 2026 · metrics 2.5.0
Go
cod-e-codes/marchat
Terminal chat for developers: Go WebSocket server + Bubble Tea TUI client, optional E2E, reactions, DMs, channels, plugins, files, code snippets, admin UI. Backends: SQLite, PostgreSQL, or MySQL. Self-hosted.
MITJul 17, 2026 · metrics 2.5.0
crates.io
confidential-containers/guest-components
Confidential Containers Guest Tools and Components
Apache-2.0Aug 3, 2026 · metrics 2.5.0
PyPI
craftablescience/sourcepp
Several modern C++20 libraries for sanely parsing Valve formats.
MITJul 18, 2026 · metrics 2.5.0
Go
crgimenes/glaze
Glaze: a CGo-free desktop WebView toolkit for Go
MITJul 29, 2026 · metrics 2.5.0
PyPI · npm
dealfluence/adeu
docx ↔ LLM translator. Projects .docx to Markdown for editing. Projects edits back to OOXML as tracked changes. Python and Node.js implementations.
MITJul 21, 2026 · metrics 2.5.0
npm
defunctzombie/node-process
process information for node.js and browsers
MITJul 22, 2026 · metrics 2.5.0
npm
eps1lon/dom-accessibility-api
Implements https://w3c.github.io/accname/
MITAug 4, 2026 · metrics 2.5.0
npm
exa-labs/exa-js
The Official Exa Javascript SDK
MITJul 17, 2026 · metrics 2.5.0
npm
fastify/session
Session plugin for fastify
MITJul 19, 2026 · metrics 2.5.0
crates.io
getzola/giallo
Syntax highlighter, same output as VSCode
EUPL-1.2Aug 5, 2026 · metrics 2.5.0
npm
gravity-ui/icons
No repository description published.
MITAug 2, 2026 · metrics 2.5.0
npm
hjdhjd/homebridge-ratgdo
🚗 non-myQ Liftmaster, Chamberlain, and Ratgdo Plugin for Homebridge
Custom licenseJul 31, 2026 · metrics 2.5.0