Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,023
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
cloudfoundry/storage-cli
Go CLI for storage access on different IaaS providers
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
code-and-effect/effective_pages
Content pages, bootstrap3 menu builder and page-specific header tag helpers for your Rails app
MITSep 18, 2026 · metrics 2.10.0
Go
companyinfo/go-query-dsl
Elasticsearch/OpenSearch Query DSL Builder
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
contao-components/dropzone
DropZone integration
No licenseSep 15, 2026 · metrics 2.10.0
Packagist
contao/manager-plugin
Contao Manager Plugin
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
contentful/optimization
Optimization SDK suite for Contentful Personalization & Analytics
MITSep 18, 2026 · metrics 2.10.0
Go
cooldogedev/spectrum-df
An implementation of the Spectrum proxy for Dragonfly servers.
MITSep 18, 2026 · metrics 2.10.0
Go
corani/adr
A simple command-line tool to manage ADRs in markdown format
MITSep 19, 2026 · metrics 2.10.0
Packagist
cortexphp/json-schema
Fluently build and validate JSON Schemas.
MITSep 16, 2026 · metrics 2.10.0
npm
corticph/speech-web-components
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
csnp/cryptodeps
Cryptographic Dependency Scanner - Identify quantum-vulnerable cryptographic algorithms in your software dependencies. Part of the QRAMM Toolkit.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm · Go
customerio/cli
No repository description published.
Custom licenseSep 15, 2026 · metrics 2.10.0
NuGet
cwinland/FastMoq
Provider‑first .NET testing framework for auto‑mocking, DI‑driven test creation, and optional Moq compatibility.
MITSep 15, 2026 · metrics 2.10.0
npm
daetz-coder/dsh-multi-chat
Multi-window wall for DeepSeek Harness: run & monitor N DSH conversations side-by-side in one screen, plus an authenticated LAN gateway for phone/tablet access. npx dsh-multi-chat install
MITSep 18, 2026 · metrics 2.10.0
Go
dana-id/dana-go
Official DANA REST API Client for Golang - Payment Gateway, IPG, and Disbursement
No licenseSep 19, 2026 · metrics 2.10.0
NuGet · npm
danielgindi/SequelNet
SQL abstraction/generalization/protection layer.
MITSep 15, 2026 · metrics 2.10.0
Go
darkneuralnetwork/DarkRecon
**A single Go binary that runs the entire Phase-1 recon lifecycle — from subdomain discovery to a prioritized, exploitation-ready target list — with a live web UI, REST API, and MCP integration for LLM agents.**
No licenseSep 19, 2026 · metrics 2.10.0
npm
decentraland/schemas
Common schemas for Decentraland
No licenseSep 15, 2026 · metrics 2.10.0
Go
defenseunicorns/terraform-provider-uds
UDS Terraform Provider
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Go
defensia/agent
Lightweight security agent for Linux servers — SSH brute force, WAF, bot detection, Docker/Kubernetes native. Deploy via curl, Docker, Helm.
MITSep 20, 2026 · metrics 2.10.0
Go
dennwc/gocomfy
ComfyUI client fo Go
MITSep 18, 2026 · metrics 2.10.0
npm
developerz-ai/ai-task-master
Autonomous task orchestrator. Goal in, merged PRs out. Planner/Worker/Reviewer loop on the Vercel AI SDK + OpenRouter.
MITSep 15, 2026 · metrics 2.10.0
PyPI
digline/digline
Regression testing for LLM applications — with the baseline in your repository, not on someone's server.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
dmarcos/three-bmfont-text
renders BMFont files in ThreeJS with word-wrapping
MITSep 17, 2026 · metrics 2.10.0
Go · npm
dmux/go-quality-gate
Language-agnostic code quality control tool with Git hooks A code quality control tool built in Go, distributed as a single binary with no external runtime dependencies. Provides enhanced visual feedback with spinners, execution timing, and structured JSON output.
MITSep 15, 2026 · metrics 2.10.0
Packagist
dotmailer/dotdigital-php
A PHP SDK for the Dotdigital API.
MITSep 17, 2026 · metrics 2.10.0
Go · npm
dotsecenv/dotsecenv
safe environment secrets
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
echogarden-project/icu-segmentation-wasm
WebAssembly port of the ICU library's character, word, line-break, and sentence segmentation methods.
MITSep 16, 2026 · metrics 2.10.0
npm · Maven
edkimmel/expo-audio-stream
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
npm
eea/volto-datablocks
Volto extension to provide remote data powered blocks. Depends on eea.restapi
MITSep 19, 2026 · metrics 2.10.0