Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,021
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
abcdlsj/gnar
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
npm
abemedia/serverless-disable-functions
A simple serverless plugin to disable functions.
GPL-3.0Sep 15, 2026 · metrics 2.10.0
npm
ably/ably-cli
Ably CLI for Pub/Sub, Chat, Spaces and Control API
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
adobe/helix-universal
The base API for Universal Serverless Functions
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
agntcy/oidc-gateway
Policy-based OIDC gateway for Envoy
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm · crates.io
ai-coustics/aic-sdk-node
Node.js bindings for ai-coustics speech enhancement SDK
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
aiosbrain/aios-workspace
An agent-native operating system for consulting & transformation teams: engagement structure, governance conventions, validators, and dynamic multi-agent workflow harnesses with adversarial verification.
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
NuGet
ajbadaj/AJut
A self contained set of C#, WPF, and WinUI3 libraries to help you build amazing tools faster!
MITSep 18, 2026 · metrics 2.10.0
npm
alexbosworth/ln-telegram
Utilities for Lightning Network Telegram bot interaction
MITSep 18, 2026 · metrics 2.10.0
Go
alphauslabs/oops
An automation-friendly, scalable, and scriptable API/generic testing tool designed to run on Kubernetes.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
NuGet
alsami/alsami.Duende.IdentityServer.AspNetCore.Testing
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
Go
amit-timalsina/pi-llm-go
Minimal Go LLM client (v1.0, stable). Streaming, strict tool calling, adaptive extended thinking, prompt caching, token counting, cost helpers, retry middleware. Anthropic Claude, OpenAI (GPT-5 + Responses), Google Gemini, OpenAI-compatible hosts.
Custom licenseSep 15, 2026 · metrics 2.10.0
Packagist
anakadote/statamic-recaptcha
Statamic Recaptcha is a Statamic addon that adds a reCAPTCHA v3 or v2 to your web forms.
MITSep 18, 2026 · metrics 2.10.0
crates.io
anatawa12/deflate64-rs
Derflate64 implementation in rust based on .NET's implementation
MITSep 18, 2026 · metrics 2.10.0
Go
anatolykoptev/dozor
AI-first server monitoring via MCP — Docker, systemd, remote hosts
MITSep 18, 2026 · metrics 2.10.0
Go
anatolykoptev/go-threads
Threads (threads.net) scraping module — public GraphQL API, LSD token auth, go-stealth TLS fingerprinting
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
anchorbrowser/AnchorBrowser-SDK-Typescript
AnchorBrowser-SDK-Typescript
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
angel-vladov/select2-theme-bootstrap5
A Select2 v4 Theme for Bootstrap 5
MITSep 18, 2026 · metrics 2.10.0
PyPI · crates.io · npm
anvai-labs/victor
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI · Go
appautomaton/markmaton
Lightweight HTML-to-Markdown parser for AI agent workflows — Python CLI and API around a fast Go engine, available on PyPI.
MITSep 15, 2026 · metrics 2.10.0
npm
apple/apple-ads-platform-api-node
A Node.js / TypeScript client library for the Apple Ads Platform API.
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
argela-uxui/ngx-connection-service
Detects active internet connection in Angular application via DI ready Observable service. Forked from https://github.com/ultrasonicsoft/ng-connection-service.
MITSep 15, 2026 · metrics 2.10.0
npm
arlac77/uti
javascript implementation of a "Universal Type Identifier"
0BSDSep 15, 2026 · metrics 2.10.0
Packagist
aseqbase/aseqbase
a sequence-based web development framework
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
astra3294/dsh-doctor
Deterministic diagnostics and recovery for DeepSeek Harness
MITSep 18, 2026 · metrics 2.10.0
Packagist
async-aws/dynamo-db
[READ ONLY] DynamoDB client
MITSep 17, 2026 · metrics 2.10.0
Go
atarnvik/ccradar
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
atheory-ai/skillex
A better way to enhance agents using skills
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm · Maven
authsignal/react-native-authsignal
Authsignal React Native SDK for authenticating with passkeys, push, email OTP, SMS OTP and authenticator app (TOTP)
MITSep 15, 2026 · metrics 2.10.0
npm · PyPI · crates.io
automators-com/flowproof
Agents are starting to run real business processes. flowproof tests them like anything else: record one real run, then replay it on every commit with zero LLM calls, asserting which tools were called, with which arguments, in which order, and which were not.
Apache-2.0Sep 16, 2026 · metrics 2.10.0