Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,027
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · npm
dmux/go-quality-gate
Language-agnostic code quality control tool with Git hooks A code quality control tool built in Go, distributed as a single binary with no external runtime dependencies. Provides enhanced visual feedback with spinners, execution timing, and structured JSON output.
MITSep 15, 2026 · metrics 2.10.0
Packagist
dotmailer/dotdigital-php
A PHP SDK for the Dotdigital API.
MITSep 17, 2026 · metrics 2.10.0
Go · npm
dotsecenv/dotsecenv
safe environment secrets
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
echogarden-project/icu-segmentation-wasm
WebAssembly port of the ICU library's character, word, line-break, and sentence segmentation methods.
MITSep 16, 2026 · metrics 2.10.0
npm · Maven
edkimmel/expo-audio-stream
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
npm
eea/volto-datablocks
Volto extension to provide remote data powered blocks. Depends on eea.restapi
MITSep 19, 2026 · metrics 2.10.0
Go
elliot-gustafsson/jgosonnet
jgosonnet
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
embassy-rs/sdio
A no-std library for interfacing with SD cards, EMMC, and/or SDIO cards, using the MmcBus trait.
No licenseSep 17, 2026 · metrics 2.10.0
Go
enowdev/cloak-go
Unofficial Go port of CloakBrowser: stealth Chromium automation over CDP (chromedp). Not affiliated with CloakHQ.
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
enricopesce/ocareport
CLI tool to check Oracle Cloud compute shape availability - find capacity across regions
MITSep 18, 2026 · metrics 2.10.0
Packagist
eonx-com/easy-quality
Quality tools for PHP projects of EonX
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
ergebnis/front-matter
👀 Provides a composer package with a front-matter parser.
MITSep 17, 2026 · metrics 2.10.0
crates.io
ernestas-poskus/tld.rs
Top Level domain static hash map for Rust according to list of iana.org
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Go
erraggy/oastools
OpenAPI Specification (OAS) tools for validating, parsing, fixing, converting, diffing, joining, and building specs; as well as generating client/servers/types from specs.
MITSep 20, 2026 · metrics 2.10.0
npm
es-shims/String.prototype.trimEnd
ES2019 spec-compliant String.prototype.trimEnd shim
MITSep 16, 2026 · metrics 2.10.0
npm
eslint-community/eslint-import-context
Provide context info for eslint-plugin-import-x, so no extra arguments need to be added.
MITSep 15, 2026 · metrics 2.10.0
Go
eslutz/Forwardarr
Port update container for Gluetun to qBittorrent port syncing that updates the listening port on change.
MITSep 18, 2026 · metrics 2.10.0
Go
fabricatorsltd/euprovguard
EU-compliant Software Bill of Materials (SBOM) generator with Qualified Electronic Signature (QES) support.
MITSep 19, 2026 · metrics 2.10.0
Go
fantasticbin/QueryBuilder
Simplifies list querying in Go
MITSep 17, 2026 · metrics 2.10.0
npm
felipecarrillo100/base62str
Encode/Decode strings to Base62 strings. Useful to convert any string to an encoded string that only contains letters and numbers.
MITSep 15, 2026 · metrics 2.10.0
npm
fideus-labs/worker-pool
A Web Worker pool with bounded concurrency, plus a companion package that accelerates zarrita codec operations on Web Workers.
MITSep 18, 2026 · metrics 2.10.0
PyPI
fishloa/lyngdorf
Python library to control a Lyngdorf Processor
No licenseSep 17, 2026 · metrics 2.10.0
Packagist
flownative/flow-oauth2-client
A generic OAuth2 client base implementation for Flow Framework applications
MITSep 15, 2026 · metrics 2.10.0
RubyGems
fluent-plugins-nursery/winevt_c
Windows Event Log API binding from winevt.h. https://docs.microsoft.com/en-us/windows/desktop/api/_wes/
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
friedemannsommer/lcov-parser
A LCOV file parser.
MITSep 18, 2026 · metrics 2.10.0
Go
frostyard/plow
debian package repository manager, 100% serverless with GH Actions and Pages
No licenseSep 19, 2026 · metrics 2.10.0
Go
gamzabox/humble-ai-cli
Be humble Be useful!
No licenseSep 19, 2026 · metrics 2.10.0
Go
gardener/terminal-controller-manager
Used for the webterminal feature of the gardener/dashboard
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
get-convex/sharded-counter
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
git-pkgs/purl
Go library for working with Package URLs (PURLs).
MITSep 15, 2026 · metrics 2.10.0