Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,483
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
Anastasia-Labs/lucid-evolution
A highly scalable, production-ready transaction builder and off-chain framework for dApps and devs on Cardano.
MITJul 21, 2026 · metrics 2.5.0
Packagist
Codeception/lib-innerbrowser
InnerBrowser
MITAug 4, 2026 · metrics 2.5.0
Packagist
CycloneDX/cyclonedx-php-composer
Create CycloneDX Software Bill of Materials (SBOM) from PHP Composer projects
Apache-2.0Jul 29, 2026 · metrics 2.5.0
crates.io
MystenLabs/sui-rust-sdk
No repository description published.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
PyPI · crates.io · npm
NVIDIA/NeMo-Relay
Multi-language agent runtime and library for execution scope management, lifecycle events, and middleware on tool and LLM calls.
Apache-2.0Aug 1, 2026 · metrics 2.5.0
crates.io · PyPI
OxiDD/oxidd
Concurrent decision diagram framework written in Rust
Apache-2.0Jul 14, 2026 · metrics 2.5.0
crates.io
PacificBiosciences/HiPhase
Small variant, structural variant, and short tandem repeat phasing tool for PacBio HiFi reads
Custom licenseJul 26, 2026 · metrics 2.5.0
Packagist
Treinetic/ImageArtist
ImageArtist is a php gd Wrapper which makes Image manipulation insanely easy, we introduce ImageArtist as Photoshop for php
MITJul 28, 2026 · metrics 2.5.0
NuGet
Unleash/unleash-dotnet-sdk
Unleash client SDK for .NET
Apache-2.0Aug 6, 2026 · metrics 2.5.0
Packagist
aerni/laravel-cloudflared
A simple package to create and manage Cloudflare Tunnels for your Laravel projects.
MITJul 17, 2026 · metrics 2.5.0
PyPI
agude/wayback-machine-archiver
A Python script to submit web pages to the Wayback Machine for archiving.
MITJul 26, 2026 · metrics 2.5.0
Go · npm
aha-hyeong/kumiho
kumiho is self-hosting web media server.
Apache-2.0Jul 26, 2026 · metrics 2.5.0
Hex
am-kantox/md
Stream-aware markdown parser with custom syntax setting
MITAug 6, 2026 · metrics 2.5.0
Go
aws/eks-node-monitoring-agent
Agent that detects health issues on Amazon EKS worker nodes
Apache-2.0Aug 2, 2026 · metrics 2.5.0
npm
bmad-code-org/bmad-method-test-architecture-enterprise
Test Architect Full BMad Method Enhancement
Custom licenseJul 27, 2026 · metrics 2.5.0
Go
butuzov/ireturn
Accept Interfaces, Return Concrete Types
MITAug 4, 2026 · metrics 2.5.0
PyPI
ccpem/mrcfile
A Python implementation of the MRC2014 file format
BSD-3-ClauseJul 21, 2026 · metrics 2.5.0
npm
cdk8s-team/cdk8s-core
Define Kubernetes native apps and abstractions using object-oriented programming
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
cloud-copilot/iam-collect
Collect IAM information from all your AWS organization, accounts, and resources.
AGPL-3.0Jul 14, 2026 · metrics 2.5.0
npm
cordiverse/cordis
Meta-Framework of Spatiotemporal Composability
MITJul 17, 2026 · metrics 2.5.0
Go
cynative/cynative
Deep cybersecurity research agent for your cloud, code and runtime - ask your infrastructure anything. Read-only, sandboxed.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm
devcontainers/action
GitHub Action to build & publish your own dev container assets
MITJul 21, 2026 · metrics 2.5.0
Go · npm
elliottech/lighter-go
Public Go SDK for Lighter
Apache-2.0Aug 6, 2026 · metrics 2.5.0
—
hayleigh-dot-dev/gleam-nibble
A string parsing library heavily inspired by elm/parser.
MITJul 17, 2026 · metrics 2.5.0
PyPI
huaweicloud/huaweicloud-sdk-python-obs
No repository description published.
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Hex
iodevs/qr_code
A library for generating QR code. https://hexdocs.pm/qr_code
BSD-4-ClauseJul 17, 2026 · metrics 2.5.0
RubyGems
ioquatix/http-accept
Parse Accept and Accept-Language HTTP headers in Ruby.
MITJul 18, 2026 · metrics 2.5.0
—
julianduque/erlang-color
ANSI colors for your Erlang
No licenseJul 17, 2026 · metrics 2.5.0
—
kde/breeze-gtk
Breeze widget theme for GTK 2 and 3
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
knowsuchagency/fulcrum
What if Openclaw, Vibe Kanban, Vibetunnel, and Dokploy had a baby?
Custom licenseJul 18, 2026 · metrics 2.5.0