Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,143
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
xuri/efp
Go Language Microsoft Excel™ Formula Parser
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
crates.io
0xdea/rhabdomancer
Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.
MITSep 19, 2026 · metrics 2.10.0
npm
Yan-Zero/dsh-std
No repository description published.
MITSep 23, 2026 · metrics 2.10.0
Go
docker/go-events
Composable event distribution for Go
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
koron/go-ssdp
SSDP library
MITSep 23, 2026 · metrics 2.10.0
Go
lestrrat-go/strftime
Fast strftime for Go
MITSep 23, 2026 · metrics 2.10.0
PyPI
pytdbot/client
Easy-to-use asynchronous TDLib wrapper for Python.
MITSep 21, 2026 · metrics 2.10.0
npm
techfort/mimir
bag-of-words calculator in javascript
MITSep 20, 2026 · metrics 2.10.0
npm · Maven · RubyGems
adjust/react_native_sdk
This is the React Native SDK of
MITSep 20, 2026 · metrics 2.10.0
npm
akshaykmr/teletype
Stream and share terminals over the web. Show off mad cli-fu, help a colleague, teach, or troubleshoot. end-to-end encrypted 🛡
Custom licenseSep 20, 2026 · metrics 2.10.0
Go
antgroup/hugescm
HugeSCM - A next generation cloud-based version control system
Apache-2.0Sep 22, 2026 · metrics 2.10.0
—
mattn/go-pointer
No repository description published.
MITSep 23, 2026 · metrics 2.10.0
Go
miku/metha
Command line OAI-PMH harvester and client with built-in cache.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
sudorandom/fauxrpc
Easily start a fake gRPC/gRPC-Web/Connect/REST server from Protobufs and OpenAPI Specs
MITSep 19, 2026 · metrics 2.10.0
crates.io
zifeo/lade
Temporary access to secrets and private networks for one command, then gone. Same wrap for humans and agents. See which access was used.
MPL-2.0Sep 21, 2026 · metrics 2.10.0
Packagist · npm
Gernott/mask
TYPO3 Extension Mask
GPL-2.0Sep 24, 2026 · metrics 2.10.0
Packagist
caffeinated/menus
:pushpin: Menu generator package for the Laravel framework
No licenseSep 20, 2026 · metrics 2.10.0
NuGet
codewithmukesh/ToastNotification
ToastNotification is a Minimal & Elegant Toast Notification Package for ASP.NET Core Web Applications that can be invoked via C#. Compatible with ASP.NET Core 3.1 and .NET 5.
MITSep 25, 2026 · metrics 2.10.0
Go
kubescape/regolibrary
The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
lsaint/aikito
Your durable workspace across AI agents.
MITSep 20, 2026 · metrics 2.10.0
Go
protocolbuffers/txtpbfmt
txtpbfmt parses, edits and formats text proto files in a way that preserves comments.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
sethcottle/littlelink-extended
Extended brand repo that can be used with https://github.com/sethcottle/littlelink
MITSep 19, 2026 · metrics 2.10.0
PyPI · crates.io
Filimoa/polars-h3
🌎 Polars H3 Geospatial Plugin
MITSep 21, 2026 · metrics 2.10.0
npm
MiniMax-AI/MiniMax-MCP-JS
Official MiniMax Model Context Protocol (MCP) JavaScript implementation that provides seamless integration with MiniMax's powerful AI capabilities including image generation, video generation, text-to-speech, and voice cloning APIs.
MITSep 20, 2026 · metrics 2.10.0
PyPI · npm
wagtail/wagtail-autocomplete
An Autocomplete edit handler for selecting Pages, Snippets, and more.
BSD-3-ClauseSep 25, 2026 · metrics 2.10.0
npm
webrecorder/wabac.js
wabac.js - Web Archive Browsing Augmentation Client
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Packagist · npm
ProfessionalWiki/chameleon
Provides a highly flexible and customizable skin using Bootstrap 4
Custom licenseSep 21, 2026 · metrics 2.10.0
npm
Tomato6966/lavalink-client
Easy, flexible and feature-rich lavalink@v4 Client. Both for Beginners and Proficients.
MITSep 20, 2026 · metrics 2.10.0
crates.io · Go
cosmos/ics23
Building generic merkle proof format for IBC
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
tiendc/go-deepcopy
Fast deep-copy library for Go
MITSep 23, 2026 · metrics 2.10.0