Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,145
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
istanbuljs/schema
Schemas describing various structures used by nyc and istanbuljs
MITSep 16, 2026 · metrics 2.10.0
PyPI
itercharles/MedHarness
AI-assisted development harness for IEC 62304 medical software teams — includes dhfkit, a standalone DHF traceability engine
MITSep 18, 2026 · metrics 2.10.0
PyPI
jackdewinter/application_properties
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
npm · Go
jakebailey/dprint-plugin-gofumpt
dprint plugin for gofumpt
MITSep 20, 2026 · metrics 2.10.0
npm
james-pre/kerium
POSIX-style errors, logging, and more
No licenseSep 17, 2026 · metrics 2.10.0
Go
jasondellaluce/synchro
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
jbremer/thfun
Obfuscation and fun through threads
No licenseSep 16, 2026 · metrics 2.10.0
NuGet
jchristn/GoogleMapsClient
I needed a simple way to parse addresses and resolve coordinates to an address. Plug in a Google Maps API key and you're all set.
MITSep 18, 2026 · metrics 2.10.0
NuGet
jchristn/Inputty
Inputty is a simple library that helps simplify the process of getting input from the console.
MITSep 16, 2026 · metrics 2.10.0
NuGet
jchristn/SendWithBrevo
A simple C# class library to help simplify sending emails using Brevo.
MITSep 18, 2026 · metrics 2.10.0
npm
jdutton/vibe-validate
Faster Agentic Coding with confidence in every commit
MITSep 20, 2026 · metrics 2.10.0
Go
jenkins-x-plugins/jx-project
a binary plugin for creating quickstarts and importing projects
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
joaquinbejar/financial_types
lightweight Rust crate providing fundamental enums for financial applications. These types are the building blocks used across trading systems, options pricing libraries, and portfolio management tools.
MITSep 19, 2026 · metrics 2.10.0
—
johnazariah/aura
Local-first, privacy-safe AI foundation for knowledge work
MITSep 19, 2026 · metrics 2.10.0
Go
jonasz-lasut/provider-anthropic
Crossplane v2 provider for Anthropic's Managed Agents API — manage Agents, Sessions, Vaults, Skills, and Memory Stores as Kubernetes resources.
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
joomla-framework/archive
Joomla Framework Archive Package
GPL-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
jscarle/PostKit
A MimeKit infused implementation of the Postmark API.
MITSep 17, 2026 · metrics 2.10.0
crates.io · PyPI
jsinger67/scnr2
Scanner/lexer with sufficient regex support and multiple scanner modes
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
jt0/gomer
No repository description published.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
juburr/openai-tool-adapter
A Go compatibility package to allow LLM tool calling for models lacking native tool calling support
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
justinasci/synco-redux
A lightweight Redux enhancer for syncing state across different environments, including browser extensions and Electron applications.
MITSep 19, 2026 · metrics 2.10.0
Go
justinstimatze/plancheck
Predict which files AI coding agents will miss — implementation spike + compiler + reference graph
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · npm
jverhoeks/escrow
Package proxy for npm and PyPI with age gate, OSV scanning, and trust scoring. Blocks packages that are too new, vulnerable, or from suspicious publishers.
MITSep 17, 2026 · metrics 2.10.0
Go
jwarykowski/shepherd
your todos herded
MITSep 19, 2026 · metrics 2.10.0
crates.io · PyPI
jwliles/pathmaster
pathmaster is a powerful command-line tool written in Rust for managing your system's PATH environment variable. It simplifies the process of adding and removing directories from your PATH, ensures backups are created automatically, and provides tools to restore previous configurations.
MITSep 19, 2026 · metrics 2.10.0
Go
k1LoW/envdo
Execute commands with environment variables from .env files.
MITSep 19, 2026 · metrics 2.10.0
Go
k8sstormcenter/bob
Software Bill of Behavior: A vendor-supplied profile of runtime behavior for contrast in detection/response
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · PyPI
k8sstormcenter/node-agent
Kubescape eBPF agent 🥷🏻
Apache-2.0Sep 19, 2026 · metrics 2.10.0
NuGet
kallebelins/mvp24hours-dotnet
Library for quick product building using: Relational database (SQL Server, PostgreSql, MySql); NoSql database (MongoDb, Redis); Message Broker (RabbitMQ); Pipeline (Pipe and Filters pattern); Documentation (Swagger); Mapping (AutoMapper); Logging (NLog); Validation and specifications, unit of work, repository, among others.
MITSep 21, 2026 · metrics 2.10.0
crates.io
kata-containers/pcilibs-rs
Rust library for Linux PCI device enumeration via sysfs, PCIe detection, VFIO driver type matching, and InfiniBand diagnostic snapshots. Extracted from Kata Containers for reuse in container runtimes and VFIO/GPU passthrough tooling.
Apache-2.0Sep 18, 2026 · metrics 2.10.0