Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,145
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · crates.io
iamd3vil/go-typst
Go bindings for Typst
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
ibexa/templated-uri-bundle
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Packagist
ibexa/templated-uri-router
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
iguanesolutions/qwen35-rp
Qwen 3.5 Reverse Proxy for handling instant / thinking modes and their variants automatically
MITSep 19, 2026 · metrics 2.10.0
crates.io
ileixe/tracing-chrometrace
A tracing layer for chrome trace.
No licenseSep 15, 2026 · metrics 2.10.0
PyPI · crates.io
ilgrad/lexindex
Compact, immutable string↔id indexes for huge catalogs: FST prefix/range/fuzzy + minimal-perfect-hash, from 1.3 B/key, zero-copy mmap load. Rust core, Python bindings.
MITSep 15, 2026 · metrics 2.10.0
crates.io
image-rs/byteorder-lite
A fork of the `byteorder` crate with no unsafe code
UnlicenseSep 17, 2026 · metrics 2.10.0
npm
imchintoo/code-multivitals
Code quality metrics engine — cyclomatic complexity, cognitive complexity, Halstead, MI, health score, smells, clones, trends, dashboard
MITSep 15, 2026 · metrics 2.10.0
Packagist
infection/phpspec-adapter
PHPSpec Test Framework Adapter for Infection
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
infobloxopen/bloxone-go-client
bloxone-go-client
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
insession-space/design-system
@insession/design-system — InSession / loophub 共通のデザインシステム（純粋 leaf UI プリミティブ + デザイントークン）
MITSep 18, 2026 · metrics 2.10.0
npm
inspect-js/get-symbol-description
Gets the description of a Symbol. Handles `Symbol()` vs `Symbol('')` properly when possible.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/has-property-descriptors
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/hasOwn
A robust, ES3 compatible, "has own property" predicate.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/is-set
Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/is-shared-array-buffer
Is this value a JS SharedArrayBuffer? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/is-weakmap
Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/is-weakref
Is this value a JS WeakRef? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/is-weakset
Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/which-builtin-type
What is the type of this builtin JS value?
MITSep 16, 2026 · metrics 2.10.0
Packagist
interactivetools-com/ZenDB
PHP/MySQL database layer where values only enter SQL through placeholders and every result HTML-encodes itself on output. Within microseconds of raw mysqli + htmlspecialchars().
MITSep 17, 2026 · metrics 2.10.0
Go
interlynk-io/spdx-zen
A high-performance Go library for parsing and manipulating SPDX 3+ JSON-LD documents
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
ipikuka/remark-mdx-remove-esm
Remark plugin to remove import and/or export statements (mdxjsEsm)
MITSep 18, 2026 · metrics 2.10.0
npm
ipikuka/unist-util-find-between
unist utility to find the nodes between two nodes
MITSep 18, 2026 · metrics 2.10.0
—
iris-contrib/formBinder
Replaced with: https://github.com/iris-contrib/schema
No licenseSep 19, 2026 · metrics 2.10.0
npm
isaacs/minipass-collect
A Minipass stream that collects all the data into a single chunk
BlueOak-1.0.0Sep 16, 2026 · metrics 2.10.0
npm
ishansasika/premium-react-loaders
Premium React Loaders - A comprehensive collection of premium, production-ready loading components for React applications. Built with TypeScript and Tailwind CSS for maximum flexibility and customization.
MITSep 18, 2026 · metrics 2.10.0
npm
istanbuljs/load-nyc-config
Utility function to load nyc configuration
ISCSep 16, 2026 · metrics 2.10.0
npm
istanbuljs/schema
Schemas describing various structures used by nyc and istanbuljs
MITSep 16, 2026 · metrics 2.10.0
PyPI
itercharles/MedHarness
AI-assisted development harness for IEC 62304 medical software teams — includes dhfkit, a standalone DHF traceability engine
MITSep 18, 2026 · metrics 2.10.0