Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,936
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
AuthPlane/go-sdk
Go SDK for protecting MCP servers and OAuth 2.1 resource servers with tokens issued by the Authplane authorization server. Includes framework adapters (e.g. MCP, net/http).
Apache-2.0Sep 15, 2026 · metrics 2.10.0
crates.io
AvalorAI/actify
An actor model built on Tokio that converts any implementation block into an actor model with the actify! macro
MITSep 17, 2026 · metrics 2.10.0
PyPI
BramAlkema/openxml-audit
Validate Office files in pure Python with Open XML SDK parity, pytest fixtures, and CI hooks.
MITSep 17, 2026 · metrics 2.10.0
PyPI
CU-Boulder-CRDDS/FAIRspreadsheets
Project looking to automate aspects of spreadsheet curation
CC0-1.0Sep 20, 2026 · metrics 2.10.0
npm
Cap-go/capacitor-firebase
Firebase plugins for Capacitor with Android, iOS, and Web support using current Firebase SDKs.
MPL-2.0Sep 18, 2026 · metrics 2.10.0
npm
Celtian/ngx-suspense-of
Angular directive that adds suspense to your app
MITSep 19, 2026 · metrics 2.10.0
Go
ClusterCockpit/cc-metric-collector
A node agent for measuring, processing and forwarding node level metrics
MITSep 15, 2026 · metrics 2.10.0
Go · npm
Clyra-AI/wrkr
npm audit for AI agents. Wrkr scans your GitHub org and local machine for coding agents, MCP servers, and AI dev tools nobody inventoried. Privilege-mapped, compliance-ready, ships evidence your auditor accepts.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
Colduction/randomizer-go
Fast, thread-safe random data generation package written in Go
MITSep 15, 2026 · metrics 2.10.0
npm
CoorpAcademy/components
[🌲] Front components for Coorpacademy
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
Crossmint/stellar-smart-account
No repository description published.
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
CycloneDX/cyclonedx-esbuild
Create CycloneDX Software Bill of Materials (SBOM) from projects built with esbuild or Bun.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
DataDog/dd-native-iast-taint-tracking-js
Node taint tracking native addon
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
Eyevinn/go-608
Go library and tools for CTA-608 (CEA-608) closed captions: live test-caption generation, encode/decode, carriage in AVC/HEVC SEI and AV1 OBUs, and SCC/WebVTT/SRT conversion
MITSep 17, 2026 · metrics 2.10.0
PyPI
FlashAlpha-lab/flashalpha-python
Python SDK for the FlashAlpha options analytics API — live options screener, gamma exposure (GEX), DEX/VEX/CHEX, options flow, 0DTE, VRP, volatility surfaces, greeks
MITSep 20, 2026 · metrics 2.10.0
npm
GMOD/abortable-promise-cache
add AbortController support to a cache of async requests
MITSep 15, 2026 · metrics 2.10.0
PyPI
GeckoVision/gecko-surf
The knowledge graph for APIs your agent can trust. Maps any API — even messy, paywalled, or on-chain ones — into a verified graph your agent traverses instead of guessing, and simulates any action to a receipt before money moves.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
Glitni/dlt-saga
Config-driven data ingestion and SCD2 historization framework built on dlt
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · crates.io
GoyGram/GoyGram
Telegram framework: Bot API + MTProto in one Python runtime over a Rust crypto/codec core. Encrypted vault, zero-copy events, zero-cost abstractions.
AGPL-3.0Sep 15, 2026 · metrics 2.10.0
PyPI
IBM/ibm-cos-sdk-python-core
ibm-cos-sdk-python-core
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
IonicaBizau/protocols
:o: Get the protocols of an input url.
MITSep 15, 2026 · metrics 2.10.0
Go
Jagerente/gocfg
⚙️ Golang config manager. Control your configurations using tags, unmarshal to structs, implement and inject your own value providers and parsers.
MITSep 20, 2026 · metrics 2.10.0
RubyGems · Maven
JesseChavez/activerecord-jdbc-adapter
SQL Server Adapter support on JRuby's ActiveRecord JDBC Adapter
BSD-2-ClauseSep 18, 2026 · metrics 2.10.0
PyPI
Joselo-zn/abi-core
Agent-Based Infrastructure (ABI): A human-supervised, modular architecture to democratize access to distributed superintelligence. Designed for transparency, explainability, and shared cognition.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
JoshuaKGoldberg/get-github-auth-token
Retrieves the running user's GitHub authentication token. 🪙
MITSep 20, 2026 · metrics 2.10.0
npm
Kikobeats/bimi-url
Resolve BIMI DNS TXT records and fetch the brand logo URL for an email domain.
MITSep 18, 2026 · metrics 2.10.0
npm
Kikobeats/router-http
Minimal Express-compatible HTTP router for pathname matching and middleware chains.
MITSep 18, 2026 · metrics 2.10.0
npm
Kong/markdown
Kong's open-source markdown renderer and live editor
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
Kuniwak/puml-parallel
Composing multiple PlantUML state diagrams in parallel with synchronization events
Custom licenseSep 18, 2026 · metrics 2.10.0