Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,730
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
evenorog/license
Embedded license information from SPDX.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
excaliburjs/excalibur-spritefusion
Excalibur SpriteFusion Plugin
BSD-2-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
executablebooks/mdformat-footnote
Footnote format addition for mdformat
MITSep 16, 2026 · metrics 2.10.0
PyPI
eyelevelai/groundx-python
A Python SDK for accessing the GroundX APIs
MITSep 17, 2026 · metrics 2.10.0
npm
fastify/fast-content-type-parse
Parse HTTP Content-Type header according to RFC 7231
MITSep 15, 2026 · metrics 2.10.0
npm
fb55/encoding-sniffer
HTML encoding sniffer, with stream support
MITSep 15, 2026 · metrics 2.10.0
Go
flashcatcloud/nightingale
An enterprise-level cloud-native monitoring system, which can be used as drop-in replacement of Prometheus for alerting and management.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
flyfish-dev/file-viewer-vue3-full
Full Vue 3 file viewer component package with all Flyfish File Viewer presets bundled.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
foresterre/rust-releases
🛬 Identify the officially available Rust releases
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
freedy237/freeflix-cli
Watch movies, series & anime from your terminal — multi-source, multi-language, no browser, no ads.
GPL-3.0Sep 14, 2026 · metrics 2.10.0
PyPI · npm
gautamvarmadatla/mcpsafetywarden
MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.
Custom licenseSep 15, 2026 · metrics 2.10.0
PyPI
gejyn14/kiwoom-cli
키움증권 REST API CLI — 주식 시세·계좌·주문·자동매매·미국주식을 터미널에서 (Kiwoom Securities CLI for Korean & US stocks)
Custom licenseSep 14, 2026 · metrics 2.10.0
Packagist
geo6/geocoder-php-addok-provider
:fr: Geocoder addok adapter - Coverage: France
MITSep 15, 2026 · metrics 2.10.0
npm
geobrowser/geo-sdk
A useful framework for building web3 applications
No licenseSep 15, 2026 · metrics 2.10.0
Go
geoffamey/wtg
Bridging support for Git Worktrees and Go Workspaces
MITSep 17, 2026 · metrics 2.10.0
Go
gerolf-vent/caddy-vault-storage
A highly available storage module for Caddy that integrates with HashiCorp Vault
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · npm
getoutreach/devbase
A collection of scripts, makefile, etc that help create microservices
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
ggrossetie/asciidoctor-emoji
Asciidoctor.js extension to add emoji in your document!
MITSep 15, 2026 · metrics 2.10.0
Go
gitpod-io/gitpod-sdk-go
Go SDK for Gitpod Flex
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
glennawatson/RoslynCommonAnalyzers
No repository description published.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
go-toolsmith/astequal
Package astequal provides AST (deep) equallity check operations.
MITSep 16, 2026 · metrics 2.10.0
Packagist
googleapis/google-cloud-php-retail
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
grafana/xk6-mqtt
MQTT protocol support for k6
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
gtkppr/email-disposable
A regularly updated list of disposable and temporary email domains.
MITSep 18, 2026 · metrics 2.10.0
Go
guidewire-oss/netwait
Netwait is a CLI utility used to wait for a network resource (HTTP, TCP service) to become available.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
ha1tch/queryfy
Validate, Query, and Transform Dynamic Data in Go
Custom licenseSep 19, 2026 · metrics 2.10.0
RubyGems
hanachin/meibo
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
npm
heripo-lab/heripo-research-radar
AI-driven intelligence for Korean cultural heritage. This package serves as both a ready-to-use newsletter service and a practical implementation example for the LLM-Newsletter-Kit.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
hexamatic/pihole-mcp
MCP server for Pi-hole v6 — DNS blocking, query analysis, and multi-instance management for AI assistants
MITSep 14, 2026 · metrics 2.10.0
npm
hmcts/one-per-page
GOV.UK style one question per page transactions made easy
MITSep 18, 2026 · metrics 2.10.0