Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,207
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
laravel/vet
Laravel Vet is a dependency audit for PHP.
MITSep 23, 2026 · metrics 2.10.0
—
elliotchance/phpserialize
📑 PHP serialize() and unserialize() for Go
MITSep 23, 2026 · metrics 2.10.0
npm
mathisonian/command-exists
node module to check if a command-line command exists
MITSep 23, 2026 · metrics 2.10.0
Go
safchain/ethtool
A simple ethtool "like" library for Go
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
tacticlaunch/mcp-linear
MCP server that enables AI assistants to interact with Linear project management system through natural language, allowing users to retrieve, create, and update issues, projects, and teams.
MITSep 19, 2026 · metrics 2.10.0
PyPI
ROCm/triton
Development repository for the Triton language and compiler
MITSep 24, 2026 · metrics 2.10.0
crates.io
stalwartlabs/hashify
Perfect hashing for an imperfect world
Custom licenseSep 26, 2026 · metrics 2.10.0
npm
AndyOGo/stylelint-declaration-strict-value
Specify properties for which a variable, function, keyword or value must be used.
MITSep 25, 2026 · metrics 2.10.0
npm
NomadicDaddy/htmx-debugger
a browser extension (Chrome and Firefox) debugging tool for htmx applications
MITSep 20, 2026 · metrics 2.10.0
npm
buildo/bento-design-system
A customizable and extensible Design System framework for React.js projects
MITSep 20, 2026 · metrics 2.10.0
PyPI
cytomining/pycytominer
Python package for image-based profiling
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go
dorkitude/linctl
A Linear CLI tool built with agents in mind (but useful to humans too). Implemented in Golang with Cobra.
MITSep 19, 2026 · metrics 2.10.0
npm
mcollina/on-exit-leak-free
Execute a function on exit without leaking memory, allowing all objects to be garbage collected
MITSep 23, 2026 · metrics 2.10.0
—
akash-network/cosmos-omnibus
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
intel/zlib
No repository description published.
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
loro-dev/loro-prosemirror
Prosemirror Binding for Loro
MITSep 21, 2026 · metrics 2.10.0
npm
mdevils/css-selector-parser
Just a CSS selector parser.
MITSep 23, 2026 · metrics 2.10.0
npm
sindresorhus/srcset
Parse and stringify the HTML <img> srcset attribute
MITSep 23, 2026 · metrics 2.10.0
npm
webpack-contrib/null-loader
[DEPRECATED] A loader that returns an empty module (can still be used for webpack 4).
MITSep 23, 2026 · metrics 2.10.0
npm
adonisjs/fold
IoC container with all required goodies to write flexible node applications
MITSep 24, 2026 · metrics 2.10.0
Maven
aliyun/aliyun-odps-jdbc
JDBC Driver for ODPS
Custom licenseSep 26, 2026 · metrics 2.10.0
npm
celer-network/sgn-v2-contracts
Smart Contracts for Celer State Guardian Network (SGN) V2 and cBridge V2
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
ethereum-attestation-service/eas-sdk
Ethereum Attestation Service - TypeScript/JavaScript SDK
MITSep 19, 2026 · metrics 2.10.0
Go
projectdiscovery/utils
Helper Libraries
MITSep 22, 2026 · metrics 2.10.0
npm
dlehmhus/next-with-linaria
Linaria loader for Next.js
MITSep 21, 2026 · metrics 2.10.0
Go
pion/srtp
A Go implementation of SRTP
MITSep 23, 2026 · metrics 2.10.0
Go
SAP/sap-btp-service-operator
SAP BTP service operator enables developers to connect Kubernetes clusters to SAP BTP accounts and to consume SAP BTP services within the clusters by using Kubernetes native tools.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
bep/debounce
A debouncer written in Go.
MITSep 23, 2026 · metrics 2.10.0
Packagist
fuko-php/masked
Mask sensitive data: replace blacklisted elements with redacted values
MITSep 24, 2026 · metrics 2.10.0
crates.io · npm
holon-run/holon
A local workbench for agents doing continuous work across sessions, commands, human input, and external events.
Apache-2.0Sep 20, 2026 · metrics 2.10.0