Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,417
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
stenciljs/sass
Sass plugin for Stencil
Custom licenseJul 30, 2026 · metrics 2.5.0
npm
supabase/server
Server-side utilities for Supabase. Handles auth, client creation, and context injection so you write business logic, not boilerplate.
MITJul 17, 2026 · metrics 2.5.0
Maven · npm
swisspush/gateleen
Gateleen is a RESTful middleware toolkit for building API gateways
Custom licenseJul 17, 2026 · metrics 2.5.0
crates.io
tempoxyz/mpp-rs
Rust SDK for the Machine Payments Protocol
Apache-2.0Jul 17, 2026 · metrics 2.5.0
PyPI · crates.io
tox-dev/toml-fmt
Format Python TOML configurations.
MITJul 21, 2026 · metrics 2.5.0
npm
vantage-sh/vantage-mcp-server
MCP Server to fetch costs and usage data from your Vantage account.
MITJul 17, 2026 · metrics 2.5.0
npm
wormhole-foundation/wormhole-sdk-ts
Wormhole TypeScript SDK
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Go
xssnick/tonutils-storage
TON Storage golang implementation
MITJul 22, 2026 · metrics 2.5.0
crates.io
zng-ui/zng
Cross-platform GUI framework.
Apache-2.0Aug 5, 2026 · metrics 2.5.0
—
zone117x/MimeMapping
Constants for (almost) all MIME types and file extensions, and method to determine MIME type of a file name.
MITJul 18, 2026 · metrics 2.5.0
Go · npm
AI2HU/gego
Generative Engine Optimization for your brand, track your GEO across all LLMs
GPL-3.0Aug 1, 2026 · metrics 2.5.0
PyPI
DataDog/dd-apm-test-agent
Test agent for Datadog APM client libraries
Custom licenseAug 4, 2026 · metrics 2.5.0
npm
Hotakus/opencode-subagent-magazine
OpenCode TUI 插件 · 实时子代理监控 · 侧边栏可视化 / Real-time Sub-Agent Monitor Sidebar Plugin for OpenCode TUI
MITJul 19, 2026 · metrics 2.5.0
—
JuliaTesting/ExprTools.jl
Light-weight expression manipulation tools
MITAug 8, 2026 · metrics 2.5.0
—
KDE/xdg-desktop-portal-kde
A backend implementation for xdg-desktop-portal that is using Qt/KDE
Custom licenseJul 23, 2026 · metrics 2.5.0
Go · npm
Mi-Bee-Studio/MiBeeNvr
Go-based lightweight NVR. Supports RTSP, ONVIF, WebRTC, HTTP-FLV, HLS, RTMP & SRT. Modern embedded web UI, single binary, zero external dependencies, cross-platform & Docker-compatible.
MITJul 27, 2026 · metrics 2.5.0
RubyGems
Mon-Ouie/coolline
Simple readline-like tool able to change representation of input
Custom licenseJul 20, 2026 · metrics 2.5.0
PyPI
PDBeurope/ccdutils
A set of python tools to deal with PDB chemical components definitions for small molecules, taken from the wwPDB Chemical Component Dictionary, uses RDKit
Apache-2.0Jul 15, 2026 · metrics 2.5.0
Packagist · npm
PedroTroller/PhpCSFixer-Custom-Fixers
A set of new fixers for PHP-CS-Fixer
No licenseJul 31, 2026 · metrics 2.5.0
npm · PyPI
PeterRK/protocache
Alternative flat binary format for Protobuf schema
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
Go · npm
SakshhamTheCoder/adbt
A modern, keyboard-driven Android Debug Bridge TUI.
MITJul 20, 2026 · metrics 2.5.0
npm
Tencent/tdesign-icons
A mono repo for TDesign Icons
MITJul 18, 2026 · metrics 2.5.0
npm
adelinamart/robrain
Shared memory across your team and your AI agents — with judgment about what's worth keeping.
Apache-2.0Jul 22, 2026 · metrics 2.5.0
PyPI
anduril/lattice-sdk-python
Anduril's Lattice Python SDK
Custom licenseJul 17, 2026 · metrics 2.5.0
Packagist · npm
awcodes/filament-sticky-header
A Filament Panels plugin to make headers sticky when scrolling.
MITJul 16, 2026 · metrics 2.5.0
npm
aws/aws-durable-execution-sdk-js
Lambda durable functions SDK, Testing SDK and fully functional examples
Apache-2.0Jul 21, 2026 · metrics 2.5.0
PyPI
celery/pytest-celery
Official pytest plugin for Celery.
Custom licenseJul 28, 2026 · metrics 2.5.0
PyPI
crossroadsfpga/enso
Ensō is a high-performance streaming interface for NIC-application communication.
BSD-3-Clause-ClearAug 2, 2026 · metrics 2.5.0
NuGet
delegateas/XrmMockup
Engine which simulates your exact Dynamics 365/CRM instance locally including all of it's logic!
MITAug 5, 2026 · metrics 2.5.0
Go
ehabterra/apispec
APISpec - Generate OpenAPI 3.1 specs from Go code with intelligent framework detection and call graph analysis. Supports Gin, Echo, Chi, Fiber, and net/http.
Apache-2.0Jul 20, 2026 · metrics 2.5.0