Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,447
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
gomlx/go-huggingface
Conveniently download files, models, tokenizers from HuggingFace Hub
Apache-2.0Aug 1, 2026 · metrics 2.5.0
Go
hashicorp/go-rootcerts
Functions for loading root certificates for TLS connections.
MPL-2.0Jul 28, 2026 · metrics 2.5.0
crates.io
hermit-os/loader
The Hermit bootloader.
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Packagist · npm
jelix/jelix
A PHP framework
Custom licenseJul 16, 2026 · metrics 2.5.0
npm
juspay/hyperswitch-control-center
Open sourced control center for managing Hyperswitch - an open sourced payment switch.
Apache-2.0Jul 25, 2026 · metrics 2.5.0
npm
jviereck/regjsparser
Parsing the JavaScript's RegExp in JavaScript.
BSD-2-ClauseAug 4, 2026 · metrics 2.5.0
—
kapendev/parin
A delightfully simple 2D game engine.
MITJul 18, 2026 · metrics 2.5.0
PyPI
keboola/keboola-mcp-server
Model Context Protocol (MCP) Server for the Keboola Platform
MITJul 18, 2026 · metrics 2.5.0
PyPI
keboola/mcp-server
Model Context Protocol (MCP) Server for the Keboola Platform
MITJul 17, 2026 · metrics 2.5.0
npm
lddubeau/saxes
An evented streaming XML parser in JavaScript
Custom licenseJul 22, 2026 · metrics 2.5.0
PyPI
mkdocstrings/autorefs
Automatically link across pages in MkDocs.
ISCJul 17, 2026 · metrics 2.5.0
npm
multiversx/mx-sdk-dapp
A library that holds the core functional logic of a dapp on the MultiversX
Custom licenseJul 13, 2026 · metrics 2.5.0
Packagist · PyPI
neos/flow
[READ-ONLY] Flow Application Framework, provides MVC, DI, AOP, Security, …
MITJul 15, 2026 · metrics 2.5.0
crates.io
nftables-rs/nftables-rs
Safe abstraction for nftables JSON API (libnftables-json).
Apache-2.0Jul 25, 2026 · metrics 2.5.0
npm
obniz/obniz
The Typescript SDK for IoT Hardware Control
Custom licenseJul 19, 2026 · metrics 2.5.0
npm
openkaiden/kaiden
No repository description published.
Apache-2.0Jul 14, 2026 · metrics 2.5.0
—
openrasta/openrasta-core
OpenRasta core libraries
MITJul 18, 2026 · metrics 2.5.0
PyPI
psf/httpbin
HTTP Request & Response Service, written in Python + Flask.
Custom licenseJul 21, 2026 · metrics 2.5.0
Go
pulumi/pulumi-java
Java support for Pulumi
Apache-2.0Jul 19, 2026 · metrics 2.5.0
—
rickstaa/action-create-tag
Simple GitHub action that can be used to create a tag inside a GitHub action.
MITJul 14, 2026 · metrics 2.5.0
—
rofinn/FilePaths.jl
A type based approach to working with filesystem paths in julia
Custom licenseAug 5, 2026 · metrics 2.5.0
Packagist
samdark/yii2-psr-log-target
Yii 2.0 log target that is able to write messages to PSR-3 compatible logger
BSD-3-ClauseAug 4, 2026 · metrics 2.5.0
Packagist · PyPI
sonata-project/SonataFormatterBundle
Symfony SonataFormatterBundle
MITAug 3, 2026 · metrics 2.5.0
PyPI
sphinx-doc/sphinx-intl
A Sphinx utility that make it easy to translate and to apply translations.
BSD-2-ClauseJul 21, 2026 · metrics 2.5.0
PyPI
ssec/polar2grid
Tools for reading, remapping, and writing satellite instrument data.
GPL-3.0Jul 26, 2026 · metrics 2.5.0
Packagist
staabm/phpstan-baseline-analysis
Analyzes PHPStan baseline files and creates aggregated error trend-reports
MITJul 22, 2026 · metrics 2.5.0
npm
stacksjs/ts-spreadsheets
📊 Easily manage & generate spreadsheets. CSV & Excel files supported.
MITJul 21, 2026 · metrics 2.5.0
crates.io
stainless-steel/md5
MD5 hash function
Custom licenseJul 14, 2026 · metrics 2.5.0
Packagist
stefandoorn/sitemap-plugin
Sitemap Plugin for Sylius eCommerce platform
MITJul 23, 2026 · metrics 2.5.0
NuGet
testably/testably.abstractions
Depend on IFileSystem, ITimeSystem and IRandomSystem in production. Swap in the in-memory mocks for tests - deterministic, cross-platform, no temp folders or Thread.Sleep.
MITJul 15, 2026 · metrics 2.5.0