Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,605
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist · RubyGems
jbtronics/settings-bundle
A bundle to easily create typesafe, user-configurable settings for symfony applications
MITJul 29, 2026 · metrics 2.5.0
RubyGems
jekyll/jekyll-watch
:eyes: Rebuild your Jekyll site when a file changes with the `--watch` switch.
MITJul 17, 2026 · metrics 2.5.0
npm
jsdom/whatwg-mimetype
Parses, serializes, manipulates, and sniffs MIME types, according to the WHATWG MIME Sniffing Standard
MITAug 4, 2026 · metrics 2.5.0
npm
krodak/clickup-cli
ClickUp CLI for AI agents
MITJul 20, 2026 · metrics 2.5.0
Packagist
laminas/laminas-filter
Programmatically filter and normalize data and files
BSD-3-ClauseJul 21, 2026 · metrics 2.5.0
npm
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
MITAug 4, 2026 · metrics 2.5.0
—
m4bwav/DotNetRandomNameGenerator
Random Person or Place Name Generator Library for .net based on Free US Census Data.
MITJul 18, 2026 · metrics 2.5.0
crates.io
magicant/yash-rs
Reimplementation of yash, an extended POSIX shell
No licenseJul 13, 2026 · metrics 2.5.0
crates.io
mikelodder7/vsss-rs
Verifiable Secret Sharing Schemes
Apache-2.0Jul 14, 2026 · metrics 2.5.0
—
mirage/digestif
Simple hash algorithms in OCaml
MITJul 19, 2026 · metrics 2.5.0
Hex
nerves-project/nerves_system_rpi3
Base Nerves system configuration for the Raspberry Pi 3
Custom licenseJul 17, 2026 · metrics 2.5.0
Hex
nerves-project/nerves_system_rpi4
Base Nerves system configuration for the Raspberry Pi 4
Custom licenseJul 17, 2026 · metrics 2.5.0
npm · PyPI
oceanbase/obdeploy
A deployer and package manager for OceanBase open-source software.
Apache-2.0Aug 5, 2026 · metrics 2.5.0
Packagist
open-dxp/opendxp
The open source platform for digital experiences. Seamlessly connect PIM, DAM, Headless CMS & Composable Commerce. API-First. 100% open source.
Custom licenseJul 15, 2026 · metrics 2.5.0
PyPI
openforcefield/openff-interchange
A project (and object) for storing, manipulating, and converting molecular mechanics data.
MITAug 5, 2026 · metrics 2.5.0
Packagist
pear/Crypt_GPG
Encrypt/decrypt PGP messages with PHP
LGPL-2.1Jul 26, 2026 · metrics 2.5.0
Packagist
php-stubs/woocommerce-stubs
WooCommerce function and class declaration stubs for static analysis
MITJul 16, 2026 · metrics 2.5.0
—
rawhat/glisten
A pure gleam TCP library
Apache-2.0Jul 20, 2026 · metrics 2.5.0
crates.io
rpcpool/yellowstone-jet
Solana QUIC transaction sender, with built in proxy and SwQoS support.
AGPL-3.0Jul 20, 2026 · metrics 2.5.0
npm · PyPI
siemens/ngx-datatable
✨ A feature-rich yet lightweight data-table crafted for Angular
MITAug 3, 2026 · metrics 2.5.0
RubyGems
socketry/async-container
Scalable multi-thread multi-process containers for Ruby.
MITJul 29, 2026 · metrics 2.5.0
—
sous-chefs/yum
Development repository for the yum cookbook
Apache-2.0Aug 1, 2026 · metrics 2.5.0
Packagist
statikbe/laravel-filament-chained-translation-manager
A translation manager tool for Laravel Filament, that makes use of the Laravel Chained Translator.
MITJul 29, 2026 · metrics 2.5.0
PyPI
theacodes/cmarkgfm
Python bindings for GitHub's cmark
MITJul 21, 2026 · metrics 2.5.0
Go
thelicato/secbutler
The perfect butler for pentesters, bug-bounty hunters and security researchers
MITJul 24, 2026 · metrics 2.5.0
Go
thiagokokada/gh-gfm-preview
A standalone/GitHub CLI extension to preview GitHub Flavored Markdown, even offline.
MITJul 23, 2026 · metrics 2.5.0
—
trbenning/serilog-sinks-xunit
The xunit test output sink for Serilog
MITJul 18, 2026 · metrics 2.5.0
Go
trisia/gotlcp
Go语言实现的传输层密码协议(TLCP GMSSL)，TLCP协议遵循 GB/T 38636-2020 Information security technology Transport Layer Cryptography Protocol (TLCP)
MITJul 15, 2026 · metrics 2.5.0
—
ublue-os/akmods
A caching layer for pre-built Fedora akmod RPMs
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Go
x448/float16
float16 provides IEEE 754 half-precision format (binary16) with correct conversions to/from float32
MITJul 28, 2026 · metrics 2.5.0