Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
55,064
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
407B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
yaitoo/xun
Xun is a web framework built on Go's built-in html/template and net/http package’s router (1.22).
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Packagist
yajra/pdo-via-oci8
PHP PDO_OCI functions via OCI8 extension
Custom licenseJul 18, 2026 · metrics 2.5.0
Packagist
yireo/Yireo_LinkPreload
Magento 2 extension to set HTTP Link headers for primary resources to allow for HTTP/2 Server Push
OSL-3.0Jul 19, 2026 · metrics 2.5.0
Go
0xPolygon/polygon-cli
A Swiss Army knife of blockchain tools
AGPL-3.0Aug 2, 2026 · metrics 2.5.0
PyPI
ASTROBIOMIKE/bit
Bioinformatics Tools
GPL-3.0Jul 14, 2026 · metrics 2.5.0
PyPI
AStrobioMike/bioinf_tools
Bioinformatics Tools
GPL-3.0Jul 16, 2026 · metrics 2.5.0
PyPI
Azure/azure-cli-dev-tools
Developer utilities for Azure CLI command module and extension developers.
MITJul 26, 2026 · metrics 2.5.0
Go
CrowdStrike/gofalcon
Golang-based SDK to CrowdStrike's APIs
MITJul 27, 2026 · metrics 2.5.0
Packagist
Daursu/laravel-zero-downtime-migration
Zero downtime migrations with Laravel and pt-online-schema-change
MITJul 27, 2026 · metrics 2.5.0
PyPI
EBI-Metagenomics/mettannotator
A comprehensive prokaryotic genome annotation pipeline
Apache-2.0Jul 28, 2026 · metrics 2.5.0
crates.io
Latias94/dear-imgui-rs
dear-imgui-rs is a Rust bindings ecosystem for Dear ImGui, featuring docking support, WGPU/GL/Vulkan backends, and a rich set of extensions (ImPlot/ImPlot3D, ImGuizmo/ImGuIZMO.quat, ImNodes, imgui-node-editor, ImGui Test Engine, file browser, reflection-based UI).
Apache-2.0Aug 3, 2026 · metrics 2.5.0
Go
RantaSec/golinhound
A BloodHound collector written in Go that discovers Linux and SSH attack paths. Outputs OpenGraph JSON and integrates with existing SharpHound and AzureHound data.
GPL-3.0Jul 20, 2026 · metrics 2.5.0
npm · RubyGems
alphagov/govuk_publishing_components
A gem to document and distribute frontend components for GOV.UK applications
MITJul 13, 2026 · metrics 2.5.0
PyPI
atlasacademy/fgo-game-data-api
HTTP API for FGO game data. Transform the raw game data into something a bit more manageable.
AGPL-3.0Aug 2, 2026 · metrics 2.5.0
npm
auth0-lab/mdl
Parse and validate MDOC CBOR encoded binaries according to ISO 18013-5.
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Hex
beam-bots/bb
The resilient robotics framework
Custom licenseJul 31, 2026 · metrics 2.5.0
npm
benjamn/wryware
A collection of packages that are probably a little too clever. Use at your own wrisk.
MITJul 15, 2026 · metrics 2.5.0
Packagist
cakephp/collection
[READ-ONLY] Collection library in CakePHP. This repo is a split of the main code that can be found in https://github.com/cakephp/cakephp
Custom licenseJul 14, 2026 · metrics 2.5.0
Packagist
canvural/larastan-strict-rules
Extra strict and opinionated PHPStan rules for Laravel.
MITJul 26, 2026 · metrics 2.5.0
RubyGems
census-instrumentation/opencensus-ruby
A stats collection and distributed tracing framework
Apache-2.0Jul 20, 2026 · metrics 2.5.0
npm
chentao1006/FluxMonitor
A system monitoring and management dashboard designed for Macs running as servers.
MITJul 17, 2026 · metrics 2.5.0
NuGet
cinderblocks/libremetaverse
A fork of the libopenmetaverse library striving for performance improvements and up-to-date compatibility with Second Life and OpenSimulator (such as it is)
BSD-3-ClauseJul 21, 2026 · metrics 2.5.0
Packagist
conekta/conekta-php
PHP Bindings for Conekta's API
MITJul 14, 2026 · metrics 2.5.0
npm
controlplaneio-fluxcd/distribution
Enterprise Distribution for Flux CD
AGPL-3.0Jul 22, 2026 · metrics 2.5.0
Go
domino14/gorilla
A crossword board game AI, written in Go
GPL-3.0Jul 17, 2026 · metrics 2.5.0
Go
domino14/macondo
A crossword board game AI, written in Go
GPL-3.0Jul 15, 2026 · metrics 2.5.0
crates.io
dropbox/dropbox-sdk-rust
Dropbox SDK for Rust
Apache-2.0Jul 17, 2026 · metrics 2.5.0
crates.io
ebarnard/rust-plist
A rusty plist parser.
MITAug 11, 2026 · metrics 2.5.0
Go
epam/edp-keycloak-operator
It is responsible for establishing a connection to provided Keycloak Server, reconciling realms, and clients according to the created CRs
Apache-2.0Jul 15, 2026 · metrics 2.5.0
Packagist
ergebnis/json-printer
📃 Provides a composer package with a JSON printer, allowing for flexible indentation.
MITJul 22, 2026 · metrics 2.5.0