Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
55,123
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
407B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
tidwall/match
Simple string pattern matcher for Go
MITJul 28, 2026 · metrics 2.5.0
PyPI
weiwei/junitparser
Parses JUnit/xUnit Result XML files with ease
Custom licenseAug 7, 2026 · metrics 2.5.0
Go
zitadel/zitadel-go
ZITADEL Go - The official client library of ZITADEL for an easy integration into your Go project.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Packagist · npm
10up/10up-experience
The 10up Experience plugin configures WordPress to better protect and inform clients, aligned to 10up’s best practices.
GPL-2.0Jul 28, 2026 · metrics 2.5.0
—
JuliaArrays/ArrayInterface.jl
Designs for new Base array interface primitives, used widely through scientific machine learning (SciML) and other organizations
MITJul 17, 2026 · metrics 2.5.0
NuGet
NeilMacMullen/kusto-loco
C# KQL query engine with flexible I/O layers and visualization
MITAug 2, 2026 · metrics 2.5.0
npm
Web3Auth/Auth
Pluggable auth infrastructure for Web3 wallets and dapps
No licenseJul 29, 2026 · metrics 2.5.0
npm
auth0/node-samlp
SAML Protocol support for node (only IdP for now)
MITJul 14, 2026 · metrics 2.5.0
npm
chalk/wrap-ansi
Wordwrap a string with ANSI escape codes
MITAug 4, 2026 · metrics 2.5.0
PyPI
connectrpc/connect-python
The Python implementation of Connect: Protobuf RPC that works.
Custom licenseJul 18, 2026 · metrics 2.5.0
Packagist
donatj/mock-webserver
Simple mock web server in pure PHP for testing.
MITJul 31, 2026 · metrics 2.5.0
Hex
elixir-inspector/ua_inspector
User agent parser library
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
ethereum-optimism/ecosystem
Optimism is Ethereum, scaled.
MITAug 4, 2026 · metrics 2.5.0
npm
github/combobox-nav
Attach combobox navigation behavior to <input> or <textarea>.
MITJul 30, 2026 · metrics 2.5.0
Go
gogpu/gg
Enterprise-grade 2D graphics library for Go. Pure Go, zero CGO. Part of GoGPU ecosystem.
MITJul 19, 2026 · metrics 2.5.0
PyPI
google/array_record
No repository description published.
Apache-2.0Jul 28, 2026 · metrics 2.5.0
PyPI
hukkin/tomli-w
A lil' TOML writer (counterpart to https://github.com/hukkin/tomli)
MITJul 16, 2026 · metrics 2.5.0
PyPI · crates.io
intel/ittapi
Intel® Instrumentation and Tracing Technology (ITT) and Just-In-Time (JIT) APIs
Custom licenseJul 21, 2026 · metrics 2.5.0
RubyGems
janlelis/unicode-display_width
Monospace Unicode and Emoji character width in Ruby
MITJul 16, 2026 · metrics 2.5.0
Go
joa23/linear-cli
A token-efficient CLI for Linear
MITJul 17, 2026 · metrics 2.5.0
Hex
klarna/erlavro
Avro support for Erlang/Elixir (http://avro.apache.org/)
Apache-2.0Jul 21, 2026 · metrics 2.5.0
npm
lynx-family/lynx-examples
🚀 Comprehensive Lynx Examples
Apache-2.0Jul 16, 2026 · metrics 2.5.0
—
matrix-io/xc3sprog
xc3sprog is a suite of utilities for programming Xilinx FPGAs, CPLDs, and EEPROMs with the Xilinx Parallel Cable and other JTAG adapters under Linux. Used to program the FPGA of the MATRIX Creator/Voice via Raspberry Pi.
Custom licenseJul 19, 2026 · metrics 2.5.0
—
microsoft/msfs-avionics-mirror
MSFS Avionics Source Code Mirror
Custom licenseJul 20, 2026 · metrics 2.5.0
Go
minio/minlz
MinLZ is a LZ77 compressor, focused on realtime data compression
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm
nfe/client-nodejs
SDK oficial da NFE.io para Node.js (TypeScript, zero dependências) para emitir NFS-e — nota fiscal de serviço eletrônica — e consultar CNPJ e CEP via API. Documentos fiscais do Brasil com async/await nativo.
No licenseJul 16, 2026 · metrics 2.5.0
Go
open-telemetry/opentelemetry-injector
No repository description published.
Apache-2.0Jul 31, 2026 · metrics 2.5.0
—
openid/authzen
Proposed standard for an Authorization API
No licenseJul 15, 2026 · metrics 2.5.0
npm
rachfop/docusaurus-plugin-llms
Docusaurus plugin for generating LLM-friendly documentation following the llmstxt.org standard
No licenseJul 23, 2026 · metrics 2.5.0
npm · RubyGems
riteshshukla04/react-native-nitro-player
A powerful audio player library for React Native
No licenseJul 20, 2026 · metrics 2.5.0