Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
55,081
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
407B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist
canvural/php-openapi-faker
Library to generate fake data for OpenAPI request/response/schemas
MITJul 26, 2026 · metrics 2.5.0
Go
cooldogedev/spectrum
Spectrum is a blazingly fast, lightweight, and easy to use Minecraft: Bedrock Edition proxy
MITAug 7, 2026 · metrics 2.5.0
npm
embrace-io/embrace-react-native-sdk
Embrace's React Native SDK built on OpenTelemetry
Apache-2.0Jul 13, 2026 · metrics 2.5.0
crates.io
fschutt/rust-fontconfig
Pure-Rust rewrite of the Linux fontconfig library (no system dependencies) - using ttf-parser and allsorts
MITJul 17, 2026 · metrics 2.5.0
—
google/osv-scanner-action
No repository description published.
Apache-2.0Aug 3, 2026 · metrics 2.5.0
npm
haydenbleasel/batchwork
Unified batch API for AI providers. Save up to 50% on LLM costs.
Custom licenseJul 25, 2026 · metrics 2.5.0
Packagist
illuminate/encryption
[READ ONLY] Subtree split of the Illuminate Encryption component (see laravel/framework)
MITJul 14, 2026 · metrics 2.5.0
npm
jayzeng/pi-memory
Persistent memory extension for pi with daily logs, scratchpad, and optional qmd‑powered semantic search.
MITJul 26, 2026 · metrics 2.5.0
RubyGems
jekyll/jekyll-avatar
A Jekyll plugin for rendering GitHub avatars
MITJul 24, 2026 · metrics 2.5.0
NuGet
kaby76/Antlr4BuildTasks
Third-party build tool for 'Official' Antlr4 tool and runtime parsers using .Net. Drop-in replacement for 'Antlr4cs' Antlr4 tool and build rules.
MITJul 30, 2026 · metrics 2.5.0
RubyGems
krasnoukhov/sidekiq-middleware
Additional sidekiq middleware
MITJul 20, 2026 · metrics 2.5.0
PyPI · npm
languitar/autosuspend
A daemon to automatically suspend and wake up a system
GPL-2.0Jul 17, 2026 · metrics 2.5.0
Hex
mhanberg/schematic
📐 schematic
MITJul 17, 2026 · metrics 2.5.0
Packagist
mindplay-dk/middleman
Dead simple PSR-15 / PSR-7 middleware dispatcher
No licenseJul 29, 2026 · metrics 2.5.0
npm
poe-platform/poe-code
Use Poe to power your favorite coding agents (Claude Code, Codex, OpenCode, etc). No need for multiple subscriptions.
MITJul 20, 2026 · metrics 2.5.0
—
pulp-platform/tech_cells_generic
Technology dependent cells instantiated in the design for generic process (simulation, FPGA)
Custom licenseJul 19, 2026 · metrics 2.5.0
Go · PyPI
pulumi/pulumi-digitalocean
A DigitalOcean Pulumi resource package, providing multi-language access to DigitalOcean
Apache-2.0Jul 16, 2026 · metrics 2.5.0
PyPI
pymoca/pymoca
A Modelica to computer algebra system translator written in python.
BSD-3-ClauseJul 28, 2026 · metrics 2.5.0
Go
richardartoul/gobuildcache
gobuildcache is an OSS remote build cache for Go, similar in spirit for Depot's remote caching feature.
MITJul 22, 2026 · metrics 2.5.0
npm
rick-and-morty-wiki/rick-and-morty-wiki
A multi-platform unified project based on Taro 3.2+ - supports React Native, Weapp, H5
No licenseJul 23, 2026 · metrics 2.5.0
—
rktjmp/playtime.nvim
🃏 At last! A way to play card games on your computer!
MITJul 21, 2026 · metrics 2.5.0
RubyGems
ruby/pstore
PStore implements a file based persistence mechanism based on a Hash.
Custom licenseJul 20, 2026 · metrics 2.5.0
PyPI
scipy/scipy-stubs
Official type stubs for SciPy
BSD-3-ClauseJul 18, 2026 · metrics 2.5.0
PyPI
setiastro/setiastrosuitepro
Seti Astro Suite Pro
GPL-3.0Jul 16, 2026 · metrics 2.5.0
—
silverstreamsai/nexusfix
A zero-alloc, compile-time hardened FIX engine built for sub-100ns execution.
MITJul 17, 2026 · metrics 2.5.0
PyPI
sprymix/csscompressor
Port of YUI CSS Compressor to Python
Custom licenseJul 18, 2026 · metrics 2.5.0
NuGet
swiftly-solution/swiftlys2
No repository description published.
Custom licenseJul 18, 2026 · metrics 2.5.0
Packagist
symfony/scheduler
Provides scheduling through Symfony Messenger
MITJul 19, 2026 · metrics 2.5.0
RubyGems
toy/image_size
measure image size using pure Ruby (by Keisuke Minami)
Custom licenseJul 20, 2026 · metrics 2.5.0
Go
unchainese/unchain
Unchain is a lightweight and easy-to-use proxy server designed to bypass network restrictions.
Apache-2.0Jul 21, 2026 · metrics 2.5.0