Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
55,045
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
407B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
n1byn1kt/apitap
CLI, MCP server, and npm library that turns any website into an API — no docs, no SDK, no browser.
Apache-2.0Aug 5, 2026 · metrics 2.5.0
Go
noobaa/noobaa-operator
Operator for NooBaa - object data service for hybrid and multi cloud environments :cloud: :wrench:
Apache-2.0Jul 18, 2026 · metrics 2.5.0
PyPI
pypa/abi3audit
Scans Python packages for abi3 violations and inconsistencies
MITJul 21, 2026 · metrics 2.5.0
npm
reown-com/appkit-react-native
AppKit SDK for React Native
Custom licenseJul 17, 2026 · metrics 2.5.0
RubyGems
ruby/uri
URI is a module providing classes to handle Uniform Resource Identifiers
Custom licenseJul 20, 2026 · metrics 2.5.0
crates.io
rust-vmm/seccompiler
Provides easy-to-use Linux seccomp-bpf jailing.
Apache-2.0Jul 18, 2026 · metrics 2.5.0
crates.io
rutgersc/m3u8-rs
m3u8 parser for rust
MITJul 31, 2026 · metrics 2.5.0
npm
samchungy/fastify-zod-openapi
Fastify plugin for zod-openapi
MITJul 26, 2026 · metrics 2.5.0
Go
squaremo/image-reflector-controller
The GitOps Toolkit container registry scanner
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Go
squaremo/image-update
The GitOps Toolkit container registry scanner
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
temporalio/ui-server
Golang Server for https://github.com/temporalio/ui
MITJul 17, 2026 · metrics 2.5.0
Go
uwaserver/uwas
Unified Web Application Server — Apache+Nginx+Varnish+Caddy in a single Go binary. Auto HTTPS, built-in caching, PHP/FastCGI, reverse proxy, load balancing, WAF, web dashboard, and MCP server.
Custom licenseJul 17, 2026 · metrics 2.5.0
crates.io
visioncortex/visioncortex
Core library for computer graphics & vision applications
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Go · npm
voidmind-io/voidllm
Privacy-first LLM proxy and AI gateway - load balancing, multi-provider routing, API key management, usage tracking, rate limiting. Self-hosted. Zero knowledge of your prompts.
Custom licenseAug 2, 2026 · metrics 2.5.0
crates.io
webgpu-tools/wesl-rs
wesl-rs: a compiler for WESL (WGSL Extended) shaders.
Custom licenseJul 24, 2026 · metrics 2.5.0
Packagist
wikimedia/less.php
Less.js ported to PHP. Mirrored from https://gerrit.wikimedia.org/g/mediawiki/libs/less.php/
Apache-2.0Aug 4, 2026 · metrics 2.5.0
RubyGems
zverok/geo_coord
Simple yet useful Geo Coordinates class for Ruby
MITJul 20, 2026 · metrics 2.5.0
PyPI
JDongian/python-jamo
Hangul syllable decomposition and synthesis using jamo.
Apache-2.0Aug 4, 2026 · metrics 2.5.0
Go
SebastienMelki/sebuf
Comprehensive Go protobuf toolkit for building type-safe HTTP APIs with automatic validation, OpenAPI docs, and low number of dependencies
MITAug 1, 2026 · metrics 2.5.0
Go
Snowflake-Labs/sansshell
A non-interactive daemon for host management
Apache-2.0Jul 20, 2026 · metrics 2.5.0
npm
The-Context-Company/observatory
No repository description published.
MITJul 18, 2026 · metrics 2.5.0
RubyGems
ahorek/terser-ruby
No repository description published.
Custom licenseJul 20, 2026 · metrics 2.5.0
npm
anonaddy/browser-extension
The source code for the browser extension
MITJul 19, 2026 · metrics 2.5.0
Maven
bannedbook/ssvpn
No repository description published.
GPL-3.0Aug 1, 2026 · metrics 2.5.0
PyPI · npm
bartfeenstra/betty
Betty visualizes and publishes your family history by building interactive, encyclopedia-like genealogy websites out of your Gramps and GEDCOM family trees
GPL-3.0Aug 2, 2026 · metrics 2.5.0
npm · PyPI
benseverndev-oss/goldenmatch
Zero-config entity resolution & record linkage. The zero-tuning Fellegi-Sunter path beats hand-tuned Splink head-to-head and scales from a CSV to a verified 100M-row dedupe in 9.2 min. Fuzzy/exact/probabilistic + PPRL + LLM + identity graph. Python + edge-safe TypeScript (WASM), SQL-native in Postgres & DuckDB, MCP/REST + dbt/Airflow.
MITJul 15, 2026 · metrics 2.5.0
Go
charmbracelet/colorprofile
Magical terminal color handling 🪄
MITJul 28, 2026 · metrics 2.5.0
npm
electrolux-oss/infrawallet
Backstage plugin that controls your cloud costs just in the way how you control your bank accounts
Apache-2.0Jul 26, 2026 · metrics 2.5.0
PyPI
irgeek/StrEnum
A Python Enum that inherits from str.
MITJul 18, 2026 · metrics 2.5.0
—
jeffkl/ManagedDism
A managed wrapper for the native Deployment Image Servicing and Management (DISM) API.
MITJul 18, 2026 · metrics 2.5.0