Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
55,031
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
407B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist
ellaisys/aws-cognito
AWS Cognito package (with MFA, SRP and Passkeys Feature) for PHP/Laravel
MITJul 14, 2026 · metrics 2.5.0
npm
feross/ieee754
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object.
BSD-3-ClauseAug 4, 2026 · metrics 2.5.0
—
g-andrade/locus
MMDB reader for geolocation and ASN lookup of IP addresses
MITJul 17, 2026 · metrics 2.5.0
PyPI
geospace-code/h5fortran
Lightweight HDF5 polymorphic Fortran: h5write() h5read()
BSD-3-ClauseAug 6, 2026 · metrics 2.5.0
PyPI
givasile/effector
Effector - a Python package for global and regional effect methods
MITJul 17, 2026 · metrics 2.5.0
npm
jellyfin/jellyfin-sdk-typescript
TypeScript SDK for Jellyfin
MPL-2.0Jul 14, 2026 · metrics 2.5.0
npm
jetstreamapp/jetstream
A better way to build on Salesforce
Custom licenseJul 27, 2026 · metrics 2.5.0
PyPI
kdeldycke/click-extra
🌈 Drop-in replacement for Click to make user-friendly and colorful CLI
GPL-2.0Jul 21, 2026 · metrics 2.5.0
Go
labstack/echo-jwt
JWT middleware for Echo framework
MITJul 14, 2026 · metrics 2.5.0
Packagist
laravel-chronicle/core
Chronicle - Verifiable Audit Logging and Append-Only Audit Trails for Laravel.
MITJul 14, 2026 · metrics 2.5.0
npm
launchdarkly/js-client-sdk
LaunchDarkly Client-side SDK for Browser JavaScript
Custom licenseJul 27, 2026 · metrics 2.5.0
—
lustre-labs/dev-tools
Lustre's CLI and development tooling: zero-config dev server, bundling, and scaffolding.
No licenseJul 17, 2026 · metrics 2.5.0
Packagist
mageplaza/magento-2-blog
Magento 2 Blog Extension is a better blog extension for Magento 2 platform. These include all useful features of Wordpress CMS
Custom licenseJul 24, 2026 · metrics 2.5.0
npm
microsoft/VirtualClient
Benchmarking and monitoring automation, designed for cloud, built with .NET.
MITJul 17, 2026 · metrics 2.5.0
Go
minio/madmin-go
The MinIO Admin Go Client SDK provides APIs to manage MinIO services
AGPL-3.0Jul 20, 2026 · metrics 2.5.0
npm
octokit/auth-token.js
GitHub API token authentication for browsers and Node.js
MITAug 4, 2026 · metrics 2.5.0
npm · PyPI
pdb-redo/alphafill
AlphaFill is an algorithm based on sequence and structure similarity that “transplants” missing compounds to the AlphaFold models. By adding the molecular context to the protein structures, the models can be more easily appreciated in terms of function and structure integrity.
BSD-2-ClauseJul 17, 2026 · metrics 2.5.0
npm
pithings/zigpty
Tiny, cross-platform PTY library for Node.js, built in Zig, also usable as a standalone Zig package. Supports Linux, macOS, Android and Windows.
MITJul 17, 2026 · metrics 2.5.0
Packagist
prewk/result
Result object for PHP inspired by Rust
Custom licenseJul 19, 2026 · metrics 2.5.0
PyPI
pyinstaller/pyinstaller-hooks-contrib
Community maintained hooks for PyInstaller.
Custom licenseJul 18, 2026 · metrics 2.5.0
crates.io
ralfbiedert/openh264-rs
Idiomatic Rust wrappers around OpenH264.
No licenseJul 14, 2026 · metrics 2.5.0
npm
sanity-io/sanity-astro
No repository description published.
MITJul 31, 2026 · metrics 2.5.0
npm
saoudi-h/solar-icons
No repository description published.
Custom licenseJul 17, 2026 · metrics 2.5.0
Hex
sevenseacat/cinder
A powerful, intelligent data collection component for Ash Framework resources in Phoenix LiveView
MITJul 17, 2026 · metrics 2.5.0
Go
sonirico/go-hyperliquid
Unofficial golang client SDK for api.hyperliquid.xyz supporting both API and websocket channels
MITJul 21, 2026 · metrics 2.5.0
RubyGems
svoop/autotest-fsevent
Use FSEvent (Mac OS X 10.5 or higher) instead of filesystem polling.
MITJul 22, 2026 · metrics 2.5.0
Go
universal-tool-calling-protocol/utcp
Official Go implementation of the UTCP
MPL-2.0Jul 16, 2026 · metrics 2.5.0
Maven
vert-x3/vertx-service-discovery
Some tools one can use for doing microservices with Vert.x
Apache-2.0Jul 17, 2026 · metrics 2.5.0
crates.io
vertexclique/kovan
High-performance wait-free memory reclamation for wait-free data structures (ASMR). Bounded memory usage, predictable latency.
Apache-2.0Jul 30, 2026 · metrics 2.5.0
NuGet
FFXIVAPP/sharlayan
Visit us on Discord! https://discord.gg/aCzSANp
MITJul 31, 2026 · metrics 2.5.0