Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
55,012
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
406B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
RubyGems
chef/mixlib-cli
A mixin for creating command line applications - gives an easy DSL for argument specification and processing
Apache-2.0Jul 22, 2026 · metrics 2.5.0
Packagist
clue/reactphp-socks
Async SOCKS proxy connector client and server implementation, tunnel any TCP/IP-based protocol through a SOCKS5 or SOCKS4(a) proxy server, built on top of ReactPHP.
MITJul 22, 2026 · metrics 2.5.0
—
custompbx/custompbx
API server and Web GUI for FreeSwitch written in Golang and Angular
MITJul 27, 2026 · metrics 2.5.0
RubyGems
emancu/toml-rb
A parser for TOML using Citrus library.
MITJul 20, 2026 · metrics 2.5.0
crates.io
eminence/terminal-size
Rust library to getting the size of your terminal
Apache-2.0Aug 11, 2026 · metrics 2.5.0
Maven · npm
exaskye/Ears
Faithful fancy fashion features for fuzzy folk.
MITJul 26, 2026 · metrics 2.5.0
PyPI
flux-framework/flux-sched
Fluxion Graph-based Scheduler
LGPL-3.0Jul 17, 2026 · metrics 2.5.0
PyPI
gforcada/flake8-builtins
Check for python builtins being used as variables or parameters
GPL-2.0Jul 28, 2026 · metrics 2.5.0
crates.io
gklijs/schema_registry_converter
A crate to convert bytes to something more useable and the other way around in a way Compatible with the Confluent Schema Registry. Supporting Avro, Protobuf, Json schema, and both async and blocking.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Hex
hrzndhrn/beam_file
BeamFile - A peek into the BEAM file
MITJul 17, 2026 · metrics 2.5.0
Packagist · npm
humanmade/query-filter
Filter controls for the query loop block, using the interactivity API
No licenseJul 23, 2026 · metrics 2.5.0
npm
iFaxity/vite-plugin-istanbul
A Vite plugin to instrument code for nyc/istanbul code coverage. In similar way as the Webpack Loader istanbul-instrumenter-loader. Only intended for use in development.
MITJul 18, 2026 · metrics 2.5.0
npm · Packagist
icehouse-ventures/laravel-chartjs
Simple package to facilitate and automate the use of charts in Laravel using the Chartjs library
MITJul 28, 2026 · metrics 2.5.0
RubyGems
jekyll-octopod/jekyll-octopod
Podcast publishing extension for Jekyll
MITAug 10, 2026 · metrics 2.5.0
RubyGems
julik/zip_kit
Compact ZIP file writing/reading for Ruby, for streaming applications
MITJul 21, 2026 · metrics 2.5.0
npm
loopbackio/loopback-connector-postgresql
PostgreSQL connector for LoopBack.
Custom licenseJul 19, 2026 · metrics 2.5.0
Go
manticore-projects/aurscan
Automatically scan AUR packages for malware before installing (using LLM/AI)
Custom licenseAug 1, 2026 · metrics 2.5.0
Go
mei-rune/gobatis
An easy ORM tool for Golang, support MyBatis-Like XML template SQL
No licenseJul 17, 2026 · metrics 2.5.0
Packagist
nette/safe-stream
SafeStream: atomic and safe manipulation with files via native PHP functions.
Custom licenseJul 14, 2026 · metrics 2.5.0
npm · Packagist
nextcloud/viewer
🖼 Simple file viewer with slideshow for media
AGPL-3.0Jul 26, 2026 · metrics 2.5.0
npm
oceanprotocol/ocean.js
🦑 Ocean Protocol JavaScript library to privately & securely publish, exchange, and consume data.
Apache-2.0Jul 22, 2026 · metrics 2.5.0
crates.io
pando85/kaniop
Kubernetes operator for managing Kanidm
AGPL-3.0Jul 17, 2026 · metrics 2.5.0
Packagist
phpstan/phpstan-nette
Nette Framework class reflection extension for PHPStan & framework-specific rules
MITJul 22, 2026 · metrics 2.5.0
Go · PyPI
pulumi/pulumi-terraform
A resource package that allows Pulumi programs to use Terraform state
Apache-2.0Jul 18, 2026 · metrics 2.5.0
RubyGems
rubyworks/ansi
Set of ANSI Code based classes and modules for Ruby
BSD-2-ClauseJul 22, 2026 · metrics 2.5.0
Go
runner-mei/GoBatis
An easy ORM tool for Golang, support MyBatis-Like XML template SQL
No licenseJul 16, 2026 · metrics 2.5.0
Go
runner-mei/gobaties
An easy ORM tool for Golang, support MyBatis-Like XML template SQL
No licenseJul 17, 2026 · metrics 2.5.0
npm
sindresorhus/is-interactive
Check if stdout or stderr is interactive
MITAug 4, 2026 · metrics 2.5.0
Packagist
sofascore/purgatory-bundle
A Symfony bundle for HTTP cache invalidation with support for various backends like Varnish.
MITJul 20, 2026 · metrics 2.5.0
PyPI
timvink/mkdocs-git-authors-plugin
MkDocs plugin to display git authors of a page.
MITJul 21, 2026 · metrics 2.5.0