Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,479
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
haproxytech/haproxy-unified-gateway
Haproxy controller to handle K8s Gateway API
Apache-2.0Aug 7, 2026 · metrics 2.5.0
Packagist
httpsoft/http-message
Strict and fast implementation of PSR-7 and PSR-17
MITJul 30, 2026 · metrics 2.5.0
Packagist
ilios/ilios
Curriculum Management System for the Health Professions
MITJul 26, 2026 · metrics 2.5.0
Maven
jakartaee/expression-language
Jakarta Expression Language
Custom licenseJul 30, 2026 · metrics 2.5.0
npm
johnnywang1994/jsPDF-html2canvas
A combine usage with jsPDF & html2canvas-pro, which translating html content to PDF file.
MITJul 22, 2026 · metrics 2.5.0
—
jpawlowski/nerd-fonts-installer-PS
Multi-Platform Web Installer for Nerd Fonts using PowerShell.
MITJul 24, 2026 · metrics 2.5.0
Packagist
laminas/laminas-session
Object-oriented interface to PHP sessions and storage
BSD-3-ClauseJul 25, 2026 · metrics 2.5.0
—
marcmerlin/SmartMatrix_GFX
SmartMatrix::GFX: Allow using Adafruit::GFX as well as FastLED_NeoMatrix code with SmartMatrix backend,
GPL-3.0Aug 1, 2026 · metrics 2.5.0
crates.io
massivefermion/birl
datetime handling for gleam
Apache-2.0Jul 17, 2026 · metrics 2.5.0
—
microsoft/kiota-dotnet
Abstractions library for the Kiota generated SDKs in dotnet
MITJul 21, 2026 · metrics 2.5.0
PyPI
munich-quantum-toolkit/predictor
MQT Predictor - A Tool for Automatic Device Selection with Device-Specific Circuit Compilation for Quantum Computing
MITJul 21, 2026 · metrics 2.5.0
NuGet
neo-project/neo-devpack-dotnet
NEO Development Pack
MITJul 23, 2026 · metrics 2.5.0
Packagist
oat-sa/qti-sdk
A QTI (Question & Test Interoperability) Software Development Kit for PHP
GPL-2.0Jul 15, 2026 · metrics 2.5.0
PyPI
online-judge-tools/template-generator
Analyze problems of competitive programming and automatically generate boilerplate
MITJul 15, 2026 · metrics 2.5.0
PyPI
openshift/openshift-client-python
A python library for interacting with OpenShift via the OpenShift client binary.
Apache-2.0Aug 8, 2026 · metrics 2.5.0
—
oxinabox/Tricks.jl
Cunning tricks though the julia compiler internals
MITJul 26, 2026 · metrics 2.5.0
PyPI
passivetotal/python_api
Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
Custom licenseJul 26, 2026 · metrics 2.5.0
Hex
plausible/ch
HTTP ClickHouse client for Elixir
MITJul 17, 2026 · metrics 2.5.0
npm
po-ui/po-style
Tema padrão do PO UI.
MITJul 17, 2026 · metrics 2.5.0
Go
praetorian-inc/pius
Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registries.
Apache-2.0Aug 8, 2026 · metrics 2.5.0
npm
pre-commit/mirrors-eslint
Mirror of eslint node package for pre-commit.
MITJul 15, 2026 · metrics 2.5.0
PyPI
priv-kweihmann/oelint-adv
Advanced oelint
BSD-2-ClauseJul 22, 2026 · metrics 2.5.0
—
processone/fast_tls
TLS / SSL OpenSSL-based native driver for Erlang / Elixir
Custom licenseJul 20, 2026 · metrics 2.5.0
—
rofinn/FilePathsBase.jl
Filesystem path types in julia
Custom licenseAug 5, 2026 · metrics 2.5.0
RubyGems
ruby/strscan
Provides lexical scanning operations on a String.
BSD-2-ClauseJul 16, 2026 · metrics 2.5.0
—
seattlerb/sexp_processor
No repository description published.
No licenseJul 22, 2026 · metrics 2.5.0
PyPI
signalkraft/myPyllant
A Python library to interact with the API behind the myVAILLANT app
MITJul 19, 2026 · metrics 2.5.0
npm
sindresorhus/is-unicode-supported
Detect whether the terminal supports Unicode
MITAug 4, 2026 · metrics 2.5.0
Packagist · npm
stephenjude/filament-two-factor-authentication
Add two factor and passkey authentication (2FA) to Filament panels.
MITJul 26, 2026 · metrics 2.5.0
npm
swapkit/SwapKit
SwapKit SDK - Integrate blockchains easily. https://swapkit.github.io/SwapKit/
Apache-2.0Jul 21, 2026 · metrics 2.5.0