Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,919
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
406B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
crates.io · PyPI
chmp/serde_arrow
Convert sequences of Rust objects to Arrow tables
MITJul 18, 2026 · metrics 2.5.0
Go
deckhouse/yandex-cloud-controller-manager
Kubernetes Cloud Controller Manager for Yandex.Cloud
Apache-2.0Aug 9, 2026 · metrics 2.5.0
npm
farseerdev/sheet-happens
Beautiful and fast spreadsheet component for React
No licenseJul 22, 2026 · metrics 2.5.0
Hex
francis-build/francis
Boilerplate killer using Bandit and Plug
MITJul 24, 2026 · metrics 2.5.0
PyPI
googleapis/synthtool
No repository description published.
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Packagist
henck/rtf-html-php
RTF to HTML converter in PHP
MITJul 15, 2026 · metrics 2.5.0
npm · PyPI
ip2location/ip2location-nodejs
IP2Location Node.js Module - Knowing where your visitors from.
MITJul 17, 2026 · metrics 2.5.0
crates.io · npm · PyPI
jolars/basin
Numerical optimization in Rust, with pluggable linear-algebra backends and WASM support.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
npm
jonschlinkert/isobject
Is the value an object, and not an array or null?
MITAug 4, 2026 · metrics 2.5.0
npm · PyPI
joshuaswarren/remnic
Open-source memory and context for user-aware agents: scoped memory, provenance, retrieval quality, correction, boundaries, evals, and MCP/HTTP access.
MITJul 13, 2026 · metrics 2.5.0
PyPI
kaitai-io/kaitai_struct_python_runtime
Kaitai Struct: runtime for Python
MITJul 30, 2026 · metrics 2.5.0
Packagist
laminas/laminas-cache
Caching implementation with a variety of storage options, as well as codified caching strategies for callbacks, classes, and output
BSD-3-ClauseJul 14, 2026 · metrics 2.5.0
npm
legioncodeinc/honeycomb
AI coding agents forget. They forget across sessions, and they forget across tools. A decision you reached in Claude Code at midnight is invisible to Cursor the next morning. Honeycomb fixes that. Learn something once; recall it everywhere,
AGPL-3.0Jul 16, 2026 · metrics 2.5.0
crates.io
marcelbuesing/can-dbc
Rust dbc parser
Apache-2.0Jul 19, 2026 · metrics 2.5.0
—
marcogrecopriolo/guglielmo
Qt based FM / Dab tuner
GPL-2.0Aug 4, 2026 · metrics 2.5.0
npm · RubyGems
microsoft/AntiSSRF
No repository description published.
MITJul 20, 2026 · metrics 2.5.0
Go · npm
mvrahden/go-test
Go test suite framework powered by code generation — BDD vocabulary, lifecycle hooks, fixtures, snapshots. Zero reflection, zero runtime deps.
MITJul 14, 2026 · metrics 2.5.0
crates.io
oxibus/can-dbc
Rust dbc parser
Apache-2.0Jul 17, 2026 · metrics 2.5.0
RubyGems
pages-themes/time-machine
Time machine is a Jekyll theme for GitHub Pages
CC0-1.0Jul 18, 2026 · metrics 2.5.0
npm
polotno-project/render-tag
Render HTML string into canvas using 2d native API
No licenseJul 19, 2026 · metrics 2.5.0
Packagist
prismicio-community/php-kit
Community maintained development kit for Prismic and the PHP language
Custom licenseJul 28, 2026 · metrics 2.5.0
Go · PyPI
pulumi/pulumi-aws-native
AWS Native Provider for Pulumi
Apache-2.0Jul 13, 2026 · metrics 2.5.0
PyPI
python-trio/unasync
The async transformation code.
Custom licenseJul 21, 2026 · metrics 2.5.0
Packagist
splitbrain/php-archive
Pure-PHP implementation to read and write TAR and ZIP archives
MITJul 20, 2026 · metrics 2.5.0
crates.io · npm
stepfunc/rodbus
Rust implementation of Modbus with idiomatic bindings for C, C++, .NET, and Java
Custom licenseJul 21, 2026 · metrics 2.5.0
RubyGems
voxpupuli/modulesync
Synchronize common files across your Git repositories.
Apache-2.0Jul 22, 2026 · metrics 2.5.0
crates.io
AllexVeldman/pyoci
Publish and install private python packages using OCI/docker registries.
MITAug 4, 2026 · metrics 2.5.0
npm
DABH/colors.js
get colors in your node.js console
Custom licenseAug 4, 2026 · metrics 2.5.0
npm
DataDog/serverless-plugin-datadog
Serverless plugin to automagically instrument your Lambda functions with Datadog
Apache-2.0Jul 31, 2026 · metrics 2.5.0
crates.io · npm
Dwlad90/stylex-swc-plugin
Rust/NAPI-RS/SWC compiler for StyleX CSS-in-JS — a faster, Babel-free replacement for @stylexjs/babel-plugin with plugins for Next.js, Vite, webpack, Rspack, Rollup, Turbopack, PostCSS, and Jest.
MITJul 19, 2026 · metrics 2.5.0