Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,986
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
406B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Hex
mirego/absinthe_error_payload
Bridges the gap between Ecto and Absinthe for mutation payload
Custom licenseJul 20, 2026 · metrics 2.5.0
npm
neondatabase/neonctl
Neon CLI tool. The Neon CLI is a command-line interface that lets you manage Neon Serverless Postgres directly from the terminal.
Apache-2.0Jul 24, 2026 · metrics 2.5.0
—
novomesk/qt-avif-image-plugin
Qt plug-in to allow Qt and KDE based applications to read/write AVIF images.
BSD-2-ClauseAug 1, 2026 · metrics 2.5.0
Go
nuixyz/kanarenshu
A minimal TUI application to practise Japanese from the terminal.
MITJul 21, 2026 · metrics 2.5.0
PyPI
pappasam/toml-sort
Toml sorting library
MITAug 8, 2026 · metrics 2.5.0
Packagist
patrickbussmann/oauth2-apple
Sign in with Apple Provider for the OAuth 2.0 Client
MITJul 22, 2026 · metrics 2.5.0
Go · RubyGems
privacybydesign/irmamobile
Yivi app for iOS and Android
Custom licenseJul 17, 2026 · metrics 2.5.0
PyPI
purduesigbots/pros-cli
Command Line Interface for managing PROS projects. Works with V5 and the Cortex
MPL-2.0Jul 20, 2026 · metrics 2.5.0
crates.io
robotty/twitch-irc-rs
Twitch IRC library for the Rust programming language
MITJul 17, 2026 · metrics 2.5.0
RubyGems
rubocop/rubocop-rake
A RuboCop plugin for Rake
MITJul 16, 2026 · metrics 2.5.0
crates.io
sebcrozet/instant
A std::time::Instant replacement that works on WASM too.
BSD-3-ClauseAug 11, 2026 · metrics 2.5.0
npm
sindresorhus/indent-string
Indent each line in a string
MITAug 4, 2026 · metrics 2.5.0
npm
sindresorhus/is-stream
Check if something is a Node.js stream
MITAug 4, 2026 · metrics 2.5.0
Packagist
slimphp/Slim-HttpCache
Slim Framework HTTP cache middleware and service provider
MITJul 29, 2026 · metrics 2.5.0
RubyGems
steveklabnik/mono_logger
A lock-free logger for Ruby 2.0
MITJul 20, 2026 · metrics 2.5.0
crates.io
tkhq/qos
QuorumOS is a computation layer for running applications inside Trusted Execution Environments (TEEs)
AGPL-3.0Jul 17, 2026 · metrics 2.5.0
npm
travist/resourcejs
An minimalistic Express.js library that will reflect a Mongoose model onto a RESTful interface with a splash of Swagger.io love.
No licenseAug 5, 2026 · metrics 2.5.0
PyPI
tylerwince/flake8-bandit
Automated security testing using bandit and flake8.
MITJul 28, 2026 · metrics 2.5.0
PyPI
ultralytics/actions
Ultralytics GitHub Actions
AGPL-3.0Jul 17, 2026 · metrics 2.5.0
npm
unmodeled-tyler/vessel-browser
Built from the ground-up for agents, Vessel Browser is an open source AI browser for Linux/Mac/Windows that provides a durable state, MCP control, and BYOK with full autonomous browsing. Use with Hermes Agent, OpenClaw, or connect to your favorite API provider.
MITJul 21, 2026 · metrics 2.5.0
—
ydb-platform/ydb-dotnet-sdk
YDB .NET SDK
Apache-2.0Jul 20, 2026 · metrics 2.5.0
crates.io
zkMIPS/zkMIPS
Ziren(formerly zkMIPS): An open-source, simple, stable, and universal zkVM on MIPS32.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
Go
AdguardTeam/urlfilter
AdGuard content blocking library in golang
GPL-3.0Jul 29, 2026 · metrics 2.5.0
npm
Automattic/gridicons
The WordPress.com icon set
GPL-2.0Jul 17, 2026 · metrics 2.5.0
PyPI
BorgwardtLab/proteinshake
Protein structure datasets for machine learning.
BSD-3-ClauseJul 15, 2026 · metrics 2.5.0
Packagist
Garethp/php-ews
PHP Exchange Web Services
BSD-3-ClauseJul 21, 2026 · metrics 2.5.0
—
JuliaGeometry/RegionTrees.jl
Quadtrees, Octrees, and more in Julia
Custom licenseAug 6, 2026 · metrics 2.5.0
npm
Synergy-Shock/country-codes-list
List of codes per country (languages, calling codes, currency codes, etc)
MITAug 5, 2026 · metrics 2.5.0
crates.io
ada-url/rust
Rust bindings for Ada URL parser
Apache-2.0Jul 29, 2026 · metrics 2.5.0
PyPI
cmacmackin/markdown-include
Provides syntax for Python-Markdown which allows for the inclusion of the contents of other Markdown documents.
GPL-3.0Jul 18, 2026 · metrics 2.5.0