Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,068
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · PyPI
NextPKI/certscan
Auto-discovery agent for TLS certificates. Scans your local IPv4/IPv6 network and static hosts for HTTPS, SMTPS, IMAPS, and more. Reports certificate metadata via Webhook. Supports TLS, STARTTLS, SNI, and protocol tagging. You can't protect what you don't know you have.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
Nick2bad4u/Prettier-Plugin-Powershell
Prettier Plugin to Format Powershell scripts. Supports ".ps1", ".psm1", and ".psd1" file types.
MITSep 21, 2026 · metrics 2.10.0
Packagist
OXID-eSales/oxideshop_demodata_ce
OXID eShop Community Edition demo data
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io · PyPI
OmniPotentRPC/rgpot
A repository of potential energy surface functions
MITSep 16, 2026 · metrics 2.10.0
Go
OneBusAway/go-gtfs
Go library for parsing GTFS static and realtime feeds
MITSep 19, 2026 · metrics 2.10.0
crates.io
OpenVTC/dtg-credentials
Decentralized Trust Graph Credentials - Rust Implementation
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
OpenVoiceOS/ovos-skill-wikihow
wikihow for OpenVoiceOS
Apache-2.0Sep 18, 2026 · metrics 2.10.0
NuGet
ParadoxGameConverters/PGCG.commonItems
Common utilities for Paradox game converters written for .NET platform.
MITSep 17, 2026 · metrics 2.10.0
Packagist
ParadoxLabs-Inc/tokenbase
TokenBase is the foundational package for most ParadoxLabs extensions for Magento®. It provides a tokenized card storage mechanism that is similar to but more featureful than Magento_Vault, and abstract components of a payment gateway implementation for Magento built around those stored cards.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
PostHog/posthog-rrweb
a complete copy of rrweb allowing us to vary CI
MITSep 15, 2026 · metrics 2.10.0
Packagist · npm
PrestaShop/ps_distributionapiclient
Allows to install & update native modules from the Back office
No licenseSep 18, 2026 · metrics 2.10.0
—
RTradeLtd/testenv
🚧 configuration for spinning up Temporal test environments
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
Rasimoghlu/laravel-lsim-single-sms-package
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
npm
ReachFive/identity-web-core-sdk
The core web SDK delivered over npm
MITSep 19, 2026 · metrics 2.10.0
crates.io
Red-Eyed/git-sfs
Large file storage for Git via symlinks - no LFS server, no pointer files, any rclone remote
MITSep 19, 2026 · metrics 2.10.0
crates.io
Remade-With-Rust/remade_ffmpeg_rs
FFmpeg remade with rust for embedded memory safe encoding and decoding. Powering FFAI and MATA's Disco Party.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
NuGet
Remarkable-Solutions/AntiCaptchaApi.Net
AntiCaptchaApi.Net provides a convenient wrapper around the Anti-captcha API methods, allowing you to easily integrate captcha solving capabilities into your .NET applications. It supports various captcha types and provides options for configuration and error handling.
MITSep 17, 2026 · metrics 2.10.0
NuGet
Remarkable-Solutions/Selenium.AntiCaptcha
A powerful .NET library that integrates Selenium WebDriver with Anti-Captcha.com's API to automatically solve various types of CAPTCHAs on web pages.
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
RobertD502/cowayaio
A asynchronous python library for the IoCare API utilized by Coway air purifiers
MITSep 21, 2026 · metrics 2.10.0
npm
RobinTail/allowed-dependencies
ESLint plugin Allowed Dependencies
MITSep 18, 2026 · metrics 2.10.0
Go
SALT-Indonesia/salt-pkg
A collection of Go modules for building robust and efficient applications including HTTP client/server management, structured logging, and event handling
No licenseSep 18, 2026 · metrics 2.10.0
Go
SAP/cloud-identity-authorizations-golang-library
This library enables applications running on SAP BTP written in GoLang to make use of the SAP Cloud Identity Authorization Management Service. It can be used together with the [GoLang Library for Identity Authentication](https://github.com/SAP/cloud-security-client-go) for user authentication.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
SRGSSR/pillarbox-event-dispatcher
A micro-service receiving events from Pillarbox players to broadcast them to multiple consumers
MITSep 15, 2026 · metrics 2.10.0
Go
Scalingo/go-philae
Philae library implementation in go: probing backend service to build healthcheck endpoints
MITSep 19, 2026 · metrics 2.10.0
Packagist
SebastianKrupinski/jmap-client-php
JMAP PHP Client
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
Go
Sendspin/sendspin-go-server
A GO implementation of a Sendspin server
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
Shuttle/Shuttle.Recall
Event sourcing mechanism.
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Go
SimonWaldherr/WASIO
a WASM hoster, like Apache but for WebAssembly-files
No licenseSep 19, 2026 · metrics 2.10.0
npm
SocketCluster/skeleton-rendezvous
Node.js module for performing fast rendezvous (HRW) hashing with skeleton - Can efficiently handle a large number of machines/sites.
MITSep 19, 2026 · metrics 2.10.0
Go
StackGuardian/terraform-provider-stackguardian
Terraform provider for StackGuardian
Custom licenseSep 20, 2026 · metrics 2.10.0