Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,429
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
gr2m/before-after-hook
wrap methods with before/after hooks
Apache-2.0Aug 4, 2026 · metrics 2.5.0
npm
gulpjs/glob-parent
Extract the non-magic parent path from a glob string.
ISCAug 4, 2026 · metrics 2.5.0
Go
hashicorp/packer-plugin-qemu
Packer plugin for QEMU Builder
MPL-2.0Jul 19, 2026 · metrics 2.5.0
Hex
hrzndhrn/xema
Xema is a schema validator for Elixir inspired by JSON Schema.
MITJul 17, 2026 · metrics 2.5.0
Packagist
illuminate/macroable
[READ ONLY] Subtree split of the Illuminate Macroable component (see laravel/framework)
MITJul 15, 2026 · metrics 2.5.0
Packagist
illuminate/redis
[READ ONLY] Subtree split of the Illuminate Redis component (see laravel/framework)
MITJul 15, 2026 · metrics 2.5.0
npm
ionic-team/stencil-sass
Sass plugin for Stencil
Custom licenseJul 18, 2026 · metrics 2.5.0
crates.io
itrous/bsl-analyzer
Анализатор кода BSL (1С:Предприятие) с поддержкой LSP. Написан на Rust.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Go
jjti/go-spancheck
checks usage of OpenTelemetry/Census spans
MITAug 4, 2026 · metrics 2.5.0
npm
lirantal/anti-trojan-source
Detect Glassworm & trojan source attacks that employ unicode bidi attacks to inject malicious code
Apache-2.0Jul 18, 2026 · metrics 2.5.0
PyPI
lnoor/sphinx-jsonschema
A Sphinx extension to display a JSON Schema
GPL-3.0Aug 8, 2026 · metrics 2.5.0
crates.io
metno/hdf5-rust
HDF5 for Rust
Apache-2.0Jul 25, 2026 · metrics 2.5.0
npm · PyPI
microsoft/Agents-M365Copilot
Microsoft 365 Copilot APIs Client Libraries
MITJul 15, 2026 · metrics 2.5.0
crates.io
microsoft/snocat
Streaming Network Overlay Connection Arbitration Tunnel
Apache-2.0Jul 14, 2026 · metrics 2.5.0
—
mondoohq/installer
Linux, macOS and Windows Install scripts for cnquery & cnspec
Custom licenseJul 16, 2026 · metrics 2.5.0
—
mondoolabs/mondoo
Linux, macOS and Windows Install scripts for cnquery & cnspec
Custom licenseJul 17, 2026 · metrics 2.5.0
Packagist
monooso/unobserve
Mute and unmute Laravel observers at will.
MITJul 15, 2026 · metrics 2.5.0
Packagist
mpyw/laravel-cached-database-stickiness
Guarantee database stickiness over the same user's consecutive requests
MITJul 14, 2026 · metrics 2.5.0
crates.io
narrowlink/ipstack
Asynchronous lightweight userspace implementation of TCP/IP stack for Tun device
Apache-2.0Jul 13, 2026 · metrics 2.5.0
Packagist
nextras/dbal
Database Abstraction Layer – concise secure API to construct queries & fetch data
MITJul 30, 2026 · metrics 2.5.0
Packagist · npm
orchestral/workbench
Workbench Companion for Laravel Packages Development
MITJul 17, 2026 · metrics 2.5.0
—
osmzoso/pbf2sqlite
A command line tool for importing OpenStreetMap PBF or XML files into a SQLite database.
GPL-3.0Jul 26, 2026 · metrics 2.5.0
Go
privacybydesign/irmago
IRMA server, client, and tooling. Documentation: http://docs.yivi.app/irma-cli
Apache-2.0Jul 17, 2026 · metrics 2.5.0
crates.io
pubky/pubky-core
An open protocol for per-public-key backends for censorship resistant web applications.
MITJul 22, 2026 · metrics 2.5.0
RubyGems
rapid7/ruby_smb
A native Ruby implementation of the SMB Protocol Family
Custom licenseJul 31, 2026 · metrics 2.5.0
—
ratgdo/homekit-ratgdo32
HomeKit firmware for the Ratgdo32-DISCO garage door controller.
GPL-3.0Jul 31, 2026 · metrics 2.5.0
crates.io
restatedev/sdk-rust
Rust SDK for restate.dev
MITJul 22, 2026 · metrics 2.5.0
Go
ryancurrah/gomodguard
Allow and block list linter for direct Go module dependencies.
MITAug 4, 2026 · metrics 2.5.0
npm
segmentio/action-destinations
Action Destinations are the new way to build streaming destinations on Segment.
No licenseJul 14, 2026 · metrics 2.5.0
Packagist
spatie/laravel-screenshot
Take screenshots of web pages
MITAug 7, 2026 · metrics 2.5.0