Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,489
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
399B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Hex
HCA-Healthcare/elixir-hl7
An Elixir library for working with HL7 v2.x healthcare data
Apache-2.0Jul 17, 2026 · metrics 2.5.0
NuGet
JKorf/Bybit.Net
A C# .netstandard client library for the Bybit REST and Websocket V5 API focusing on clear usage and models
MITJul 29, 2026 · metrics 2.5.0
—
Magisk-Modules-Alt-Repo/usb-samplerate-unlocker
USB (HAL) Audio Class drivers on Android have a limiter of sample rates at 96kHz. This magisk module unlocks the limiter.
AGPL-3.0Aug 4, 2026 · metrics 2.5.0
—
NotAdam/Lumina
A simple, performant and extensible framework for interacting with FFXIV game data
WTFPLJul 20, 2026 · metrics 2.5.0
Packagist
auth0/symfony
Symfony SDK for Auth0 Authentication and Management APIs.
MITJul 15, 2026 · metrics 2.5.0
—
aws/aws-sdk-net
The official AWS SDK for .NET. For more information on the AWS SDK for .NET, see our web site:
Apache-2.0Jul 21, 2026 · metrics 2.5.0
npm · crates.io
bob-collective/bob
BOB is building the Gateway to Bitcoin DeFi, unlocking real utility for the world’s most important asset.
No licenseJul 22, 2026 · metrics 2.5.0
crates.io
bytecodealliance/wstd
A WebAssembly-native Rust stdlib
Apache-2.0Jul 23, 2026 · metrics 2.5.0
PyPI
celery/vine
Python promises
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
chaijs/type-detect
Improved typeof detection for node.js and the browser.
MITAug 4, 2026 · metrics 2.5.0
PyPI
choupit0/MassVulScan
A fast network scanning tool to detect open ports and security vulnerabilities (Compatible with Debian & Red Hat OS)
GPL-3.0Aug 4, 2026 · metrics 2.5.0
PyPI
data-apis/array-api-compat
Compatibility layer for common array libraries to support the Array API
MITJul 21, 2026 · metrics 2.5.0
—
dlidstrom/Duplo
Duplicates finder for various source code formats.
GPL-2.0Jul 22, 2026 · metrics 2.5.0
RubyGems
dryruby/ebnf
EBNF parser and generic parser generator for Ruby.
UnlicenseJul 28, 2026 · metrics 2.5.0
npm
extractus/oembed-extractor
Extract oEmbed data from given webpage
MITJul 31, 2026 · metrics 2.5.0
npm
gotgenes/pi-anthropic-auth
Pi extension package for Anthropic OAuth compatibility
MITJul 30, 2026 · metrics 2.5.0
npm
harlan-zw/nuxt-seo-utils
SEO utilities to improve your Nuxt sites discoverability and shareability.
MITJul 25, 2026 · metrics 2.5.0
npm
josephg/node-foundationdb
Modern Node.js FoundationDB bindings
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
lhncbc/lforms
See the project website at http://lhncbc.github.io/lforms/, or view the demo website at https://lhcforms.nlm.nih.gov/lhcforms.
Custom licenseJul 15, 2026 · metrics 2.5.0
PyPI
mitchelllisle/sparkdantic
✨ A Pydantic to PySpark schema library
MITJul 18, 2026 · metrics 2.5.0
npm
oxgeneral/ORCH
One CLI to orchestrate them all. Manage a team of AI agents executing tasks in parallel from your terminal using a command line interface to manage them all. Manage a team of artificial intelligence agents who perform tasks in parallel from your terminal or offline on a local or server
MITAug 3, 2026 · metrics 2.5.0
Packagist
phptg/bot-api
PHP library to interact with Telegram Bot API
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
PyPI
pypa/pyproject-hooks
A low-level library for calling build-backends in `pyproject.toml`-based project
MITJul 21, 2026 · metrics 2.5.0
Packagist
statamic/eloquent-driver
Provides support for storing your Statamic data in a database, rather than flat files.
MITJul 30, 2026 · metrics 2.5.0
crates.io · npm
0xMiden/protocol
Core components of the Miden protocol
MITJul 26, 2026 · metrics 2.5.0
—
Macross-Software/core
Core repository contains the primary open source libraries released by Macross Software for .NET Core.
MITAug 4, 2026 · metrics 2.5.0
—
PacificBiosciences/ccs
CCS: Generate Highly Accurate Single-Molecule Consensus Reads (HiFi Reads)
BSD-3-Clause-ClearJul 26, 2026 · metrics 2.5.0
npm
SBoudrias/mem-fs
Simple in-memory vinyl file store.
MITJul 17, 2026 · metrics 2.5.0
—
SciML/PreallocationTools.jl
Tools for building non-allocating pre-cached functions in Julia, allowing for GC-free usage of automatic differentiation in complex codes
Custom licenseJul 17, 2026 · metrics 2.5.0
Go · npm
TecharoHQ/yeet
For when shell scripts aren't enough but a full program is too much. Yeet that script out!
MITJul 27, 2026 · metrics 2.5.0