Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,625
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
ng-forge/ng-forge
Type-safe dynamic forms library for Angular 21 signal forms
MITAug 7, 2026 · metrics 2.5.0
Go
noandrea/geo2tz
A self-hostable REST-like API to get the time zone from geo coordinates
MITJul 19, 2026 · metrics 2.5.0
Go · npm
nuonco/nuon
An open-source platform for software vendors to deploy and operate their software in their customers' cloud accounts. aka Bring Your Own Cloud (BYOC)
AGPL-3.0Jul 15, 2026 · metrics 2.5.0
npm
oracle/oci-typescript-sdk
Oracle Cloud Infrastructure SDK for TypeScript and JavaScript
Custom licenseJul 17, 2026 · metrics 2.5.0
Packagist
pear/PEAR_Exception
No repository description published.
Custom licenseJul 25, 2026 · metrics 2.5.0
RubyGems
piotrmurach/tty-reader
A set of methods for processing keyboard input in character, line and multiline modes.
MITJul 20, 2026 · metrics 2.5.0
Go · PyPI
pulumi/pulumi-docker
A Docker Pulumi resource package, providing multi-language access to Docker resources and building images.
Custom licenseJul 16, 2026 · metrics 2.5.0
npm
saucelabs/node-saucelabs
A wrapper around Sauce Labs API
Apache-2.0Aug 3, 2026 · metrics 2.5.0
crates.io
seanmonstar/unicase
Unicode Case-folding for Rust
Apache-2.0Aug 8, 2026 · metrics 2.5.0
npm
sindresorhus/cli-truncate
Truncate a string to a specific width in the terminal
MITAug 4, 2026 · metrics 2.5.0
npm · Go
talen8/FlecBlog
一个现代化的全栈博客系统，集成了文章管理、评论互动、友链交换、动态发布、数据统计等完整功能。
MITJul 23, 2026 · metrics 2.5.0
PyPI
tonylofgren/aurora-smart-home
Independent Claude Skills for the whole smart home: Home Assistant, ESPHome, Node-RED, custom integrations, dashboards, and fab-ready hardware design.
MITJul 21, 2026 · metrics 2.5.0
crates.io · npm
vloldik/rlibphonenumber
A high-performance Rust port of Google's libphonenumber for parsing, formatting, and validating international phone numbers
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
3052/diana
Digital rights management (DRM)
OSL-3.0Jul 21, 2026 · metrics 2.5.0
Go
4cq2/stream
Digital rights management (DRM)
OSL-3.0Jul 19, 2026 · metrics 2.5.0
RubyGems
AikidoSec/firewall-ruby
Zen protects your Ruby app against attacks with one line of code. Get peace of mind— at runtime.
Custom licenseJul 22, 2026 · metrics 2.5.0
Packagist
Codeception/module-symfony
Codeception module for testing apps using Symfony framework
MITAug 4, 2026 · metrics 2.5.0
Hex
DockYard/openid_connect
Client library for consuming and working with OpenID Connect Providers
MITJul 17, 2026 · metrics 2.5.0
—
MitchBodmer/serilog-sinks-testcorrelator
A Serilog sink that correlates log events with the code that produced them, enabling unit testing of log output.
MITJul 18, 2026 · metrics 2.5.0
Packagist
Nyholm/psr7-server
Helper classes to use any PSR7 implementation as your main request and response
MITJul 22, 2026 · metrics 2.5.0
NuGet
Qowaiv/Qowaiv
Qowaiv is a Single Value Object library
MITJul 22, 2026 · metrics 2.5.0
—
VerifyTests/Verify.SourceGenerators
Extends Verify to allow verification of C# Source Generators.
MITJul 18, 2026 · metrics 2.5.0
PyPI
YosefLab/scib-metrics
Accelerated, Python-only, single-cell integration benchmarking metrics
BSD-3-ClauseJul 22, 2026 · metrics 2.5.0
PyPI
airmang/python-hwpx
Pure Python HWPX automation: read, edit, generate, and validate documents without Hancom Office.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Packagist
akeneo/api-php-client
PHP client of Akeneo PIM API
Custom licenseAug 7, 2026 · metrics 2.5.0
Maven
apache/maven-clean-plugin
Apache Maven Clean Plugin
Apache-2.0Jul 28, 2026 · metrics 2.5.0
npm · PyPI
azure/gpt-rag-orchestrator
The GPT-RAG Orchestrator service is an agentic orchestration layer built on Microsoft Foundry Agent Service and the Microsoft Agent framework. It enables agent-based RAG workflows by coordinating multiple specialized agents to collaboratively generate accurate, context-aware responses for complex user queries.
MITJul 15, 2026 · metrics 2.5.0
Go
bcmk/siren
Telegram bot for webcast alerts
MITAug 1, 2026 · metrics 2.5.0
Go
beckn-one/beckn-onix
beckn onix
MITJul 18, 2026 · metrics 2.5.0
Go
beckn/beckn-onix
beckn onix
MITJul 27, 2026 · metrics 2.5.0