Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,905
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
406B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
RubyGems
makandra/geordi
Collection of command line tools used in our daily work with Ruby, Rails and Linux.
MITJul 16, 2026 · metrics 2.5.0
PyPI
mehcode/python-xmlsec
Python bindings for the XML Security Library.
MITJul 18, 2026 · metrics 2.5.0
Hex
mroth/exmoji
:sunglasses: Emoji encoding swiss army knife for Elixir/Erlang
MITJul 17, 2026 · metrics 2.5.0
crates.io
njaremko/samael
A SAML2 library for Rust
MITJul 14, 2026 · metrics 2.5.0
Packagist
orchestral/testbench-dusk
Laravel Dusk Testing Helper for Package Development
MITJul 15, 2026 · metrics 2.5.0
RubyGems
plu/simctl
Ruby interface to xcrun simctl
MITJul 20, 2026 · metrics 2.5.0
Packagist
rectorphp/type-perfect
Next level type declaration check PHPStan rules
MITJul 14, 2026 · metrics 2.5.0
RubyGems
ruby-amqp/kicks
The project originally known as Sneakers
MITJul 31, 2026 · metrics 2.5.0
PyPI
s-allius/tsun-gen3-proxy
This proxy enables a reliable connection between TSUN inverters (eg. TSOL MS800, MS2000, MS3000), batteries (TSOL DC1000) and an MQTT broker in order to integrate them into typical home automation systems.
BSD-3-ClauseJul 31, 2026 · metrics 2.5.0
crates.io
tracel-ai/cubek
CubeK: high-performance multi-platform kernels in CubeCL
Apache-2.0Jul 29, 2026 · metrics 2.5.0
npm
uploadcare/file-uploader
Stack-agnostic library for uploading, processing, and editing images on-the-fly
MITJul 18, 2026 · metrics 2.5.0
npm · Packagist
watchfulli/XCloner-Wordpress
Backup and Restore Plugin for Wordpress
GPL-2.0Jul 27, 2026 · metrics 2.5.0
Packagist
wp-cli/entity-command
Manage WordPress comments, menus, options, posts, sites, terms, and users.
MITJul 20, 2026 · metrics 2.5.0
PyPI
zhejianglabncrc/spaic
Spike-based artificial intelligence computing platform
Apache-2.0Jul 16, 2026 · metrics 2.5.0
PyPI · npm
DaviReisVieira/stackport
Open-source universal AWS resource browser for LocalStack, MiniStack, Moto, and real AWS
MITJul 19, 2026 · metrics 2.5.0
—
JuliaLang/Tokenize.jl
Tokenization for Julia source code
Custom licenseJul 22, 2026 · metrics 2.5.0
Go
Kong/kong-operator
Kubernetes Operator for Kong Gateways
Apache-2.0Jul 20, 2026 · metrics 2.5.0
npm · crates.io
NomicFoundation/edr
An Ethereum development runtime implementation that can be reused to build new developer tools.
Custom licenseJul 21, 2026 · metrics 2.5.0
Go
ROCm/gpu-operator
No repository description published.
Apache-2.0Aug 11, 2026 · metrics 2.5.0
crates.io
RustCrypto/KDFs
Collection of Key Derivation Functions written in pure Rust
No licenseAug 8, 2026 · metrics 2.5.0
npm
SabakiHQ/Shudan
A highly customizable, low-level Preact Goban component.
MITJul 21, 2026 · metrics 2.5.0
NuGet
SpecterOps/SharpHoundCommon
Common library used by SharpHound.
GPL-3.0Jul 26, 2026 · metrics 2.5.0
npm · Maven · RubyGems
THEOplayer/react-native-theoplayer
A React Native THEOplayerView component
BSD-3-Clause-ClearJul 31, 2026 · metrics 2.5.0
Go
authzed/spicedb-operator
Kubernetes controller for managing instances of SpiceDB
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Hex
balance-platform/pillar
Elixir library client for work with ClickHouse
No licenseJul 20, 2026 · metrics 2.5.0
crates.io · npm
bitwarden/sdk-internal
Bitwarden internal SDK.
Custom licenseJul 13, 2026 · metrics 2.5.0
Packagist
byjg/php-swagger-test
A set of tools for testing your REST calls based on the swagger documentation using PHPUnit
MITAug 2, 2026 · metrics 2.5.0
Go
celer-pkg/celer
A lightweight C/C++ package manager driven by TOML.
MITJul 17, 2026 · metrics 2.5.0
npm
cjihrig/credit-card
Credit card validation
MITJul 24, 2026 · metrics 2.5.0
npm · PyPI · RubyGems
cmu-delphi/delphi-epidata
An open API for epidemiological data.
MITJul 15, 2026 · metrics 2.5.0