Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,952
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
406B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
mudler/yip
:pushpin: Yaml Instructions Processor - Simply applies a cloud-init style yaml file to the system
Apache-2.0Aug 2, 2026 · metrics 2.5.0
PyPI · npm · crates.io
nambok/mentedb
A cognition aware database engine for AI agent memory. Purpose built in Rust with WAL, HNSW, knowledge graphs, and speculative context pre assembly. Not a wrapper, a ground up storage engine that thinks.
Apache-2.0Jul 23, 2026 · metrics 2.5.0
PyPI
omnilib/ufmt
Safe, atomic formatting with black and µsort
MITAug 8, 2026 · metrics 2.5.0
PyPI
openstax/openstax-cms
The OpenStax CMS, built using Wagtail on top of Django.
AGPL-3.0Jul 19, 2026 · metrics 2.5.0
Go · PyPI
opentelekomcloud/terraform-provider-opentelekomcloud
Terraform T Cloud Public (OpenTelekomCloud) provider
MPL-2.0Jul 28, 2026 · metrics 2.5.0
crates.io
paiml/aprender
Next Generation Machine Learning, Statistics and Deep Learning in PURE Rust
MITJul 28, 2026 · metrics 2.5.0
Go · crates.io · Maven +2
peterrk/pagebloomfilter
Fastest bloom filter in C++/Go/Rust/Java/C#
BSD-3-ClauseJul 17, 2026 · metrics 2.5.0
—
qt/qtopcua
Qt wrapper for existing OPC UA stacks
Custom licenseJul 14, 2026 · metrics 2.5.0
—
qtproject/qtopcua
Qt wrapper for existing OPC UA stacks
Custom licenseJul 14, 2026 · metrics 2.5.0
npm
reliefeai/browser-relay
Let AI agents share your everyday, logged-in Chrome through a Skill + CLI — locally or across multiple machines.
MITJul 20, 2026 · metrics 2.5.0
Hex
revelrylabs/text_chunker_ex
A library for semantically coherent text chunking
MITJul 17, 2026 · metrics 2.5.0
RubyGems
rspec/rspec
The RSpec monorepo
MITJul 15, 2026 · metrics 2.5.0
Go · Maven
seqra/seqra
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Maven
serverlessworkflow/sdk-java
Java SDK for Serverless Workflow
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm · Packagist
simple-icons/simple-icons-font
SVG icon font for popular brands
CC0-1.0Jul 24, 2026 · metrics 2.5.0
npm
sindresorhus/npm-run-path
Get your PATH prepended with locally installed binaries
MITAug 4, 2026 · metrics 2.5.0
Go · crates.io · npm
stakwork/stakgraph
A source code parser using treesitter, LSP, and neo4j, powering software knowledge graphs for AI agents.
No licenseJul 21, 2026 · metrics 2.5.0
PyPI
tensorflow/metadata
Utilities for passing TensorFlow-related metadata between tools
Apache-2.0Jul 21, 2026 · metrics 2.5.0
RubyGems
vale-cli/Microsoft
A Vale-compatible implementation of the Microsoft Writing Style Guide.
MITJul 21, 2026 · metrics 2.5.0
PyPI
yohey-w/codd-dev
CoDD: Coherence-Driven Development — Claude Code plugin for cross-artifact change impact analysis
MITJul 17, 2026 · metrics 2.5.0
crates.io
AspectUnk/russh-sftp
SFTP subsystem supported server and client for Russh
Apache-2.0Aug 5, 2026 · metrics 2.5.0
—
Azure/bicep-types-az
Bicep type definitions for ARM resources
MITJul 24, 2026 · metrics 2.5.0
crates.io
CarlKCarlK/range-set-blaze
Integer sets as fast, sorted, integer ranges with full set operations
Custom licenseJul 13, 2026 · metrics 2.5.0
npm
Doist/todoist-sdk-typescript
A TypeScript wrapper for the Todoist REST API.
MITJul 20, 2026 · metrics 2.5.0
PyPI
Mael-J/mstarpy
python package to get financial data from Morningstar
MITJul 27, 2026 · metrics 2.5.0
PyPI
MatthewFlamm/pytest-homeassistant-custom-component
Package to automatically extract testing plugins from Home Assistant for custom component testing
MITAug 1, 2026 · metrics 2.5.0
npm
QubitProducts/cherrytree
A flexible nested router.
MITAug 4, 2026 · metrics 2.5.0
npm
Shopify/shopify-app-bridge
No repository description published.
No licenseJul 20, 2026 · metrics 2.5.0
Go · npm · PyPI
alyraffauf/switchyard
Rules-based browser gateway and link redirector.
GPL-3.0Aug 3, 2026 · metrics 2.5.0
Packagist
amphp/file
An abstraction layer and non-blocking file access solution that keeps your application responsive.
MITAug 9, 2026 · metrics 2.5.0