Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,408
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
—
scipopt/soplex
Sequential object-oriented simPlex
Apache-2.0Jul 21, 2026 · metrics 2.5.0
npm
sindresorhus/p-locate
Get the first fulfilled promise that satisfies the provided testing function
MITAug 4, 2026 · metrics 2.5.0
—
sisimai/p5-sisimai
Mail Analyzing Interface for email bounce: A Perl module to parse RFC5322 bounce mails and generating structured data as JSON from parsed results. Formerly known as bounceHammer 4: an error mail analyzer.
BSD-2-ClauseJul 25, 2026 · metrics 2.5.0
Hex
smashedtoatoms/the_fuzz
String metrics and phonetic algorithms for Elixir (e.g. Dice/Sorensen, Hamming, Jaccard, Jaro, Jaro-Winkler, Levenshtein, Metaphone, N-Gram, NYSIIS, Overlap, Ratcliff/Obershelp, Refined NYSIIS, Refined Soundex, Soundex, Weighted Levenshtein)
Apache-2.0Jul 17, 2026 · metrics 2.5.0
crates.io
stellar/rs-soroban-env
Rust environment for Soroban contracts.
Apache-2.0Aug 2, 2026 · metrics 2.5.0
npm
streaming-video-technology-alliance/common-media-library
A common library for media playback in JavaScript
Apache-2.0Jul 30, 2026 · metrics 2.5.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-embedded-template
Tree-sitter grammar for embedded template languages like ERB, EJS
MITJul 21, 2026 · metrics 2.5.0
Go
truenas/truenas-csi
TrueNAS Official K8's & Openshift CSI Drivers
GPL-3.0Jul 27, 2026 · metrics 2.5.0
npm
twilio/twilio-voice.js
Twilio's JavaScript Voice SDK
Custom licenseJul 30, 2026 · metrics 2.5.0
PyPI
usedhonda/statusline
No repository description published.
MITJul 17, 2026 · metrics 2.5.0
crates.io
valkey-io/valkeymodule-rs
Rust valkey SDK for modules
BSD-3-ClauseAug 5, 2026 · metrics 2.5.0
Packagist · PyPI
wol-soft/php-json-schema-model-generator
Creates (immutable) PHP model classes from JSON-Schema files including all validation rules as PHP code
MITJul 15, 2026 · metrics 2.5.0
NuGet · npm
zompinc/sync-method-generator
Generates a synchronized version of an async method
MITJul 27, 2026 · metrics 2.5.0
crates.io
BlockstreamResearch/SimplicityHL
Rust-like high-level language that compiles down to Simplicity bytecode.
No licenseJul 29, 2026 · metrics 2.5.0
npm
Canonry/canonry
An agent first AEO monitoring and operating platform
Custom licenseJul 17, 2026 · metrics 2.5.0
Go · PyPI
CircleCI-Public/chunk-cli
Chunk from the command line
MITJul 14, 2026 · metrics 2.5.0
NuGet
GeiserX/whisper-subs
Jellyfin plugin for local AI-powered subtitle generation using Whisper - all processing stays on your server
GPL-3.0Jul 24, 2026 · metrics 2.5.0
Packagist
Happyr/message-serializer
Serialize messages for transport over the wire
MITJul 20, 2026 · metrics 2.5.0
Packagist
InnoGE/laravel-msgraph-mail
Laravel Mail driver for Microsoft Office 365 using the MSGraph API
MITJul 22, 2026 · metrics 2.5.0
npm
Null-Square/Null-CLi
Open-source AI pentest and compliance-readiness CLI by NullSquare.
Custom licenseAug 4, 2026 · metrics 2.5.0
—
Viskores/viskores
A visualization library for many-threaded devices.
Custom licenseJul 31, 2026 · metrics 2.5.0
npm
ant-design/antd-token-previewer
No repository description published.
MITJul 14, 2026 · metrics 2.5.0
crates.io
ararog/deboa
A very simple and straightforward HTTP client written in Rust.
Apache-2.0Aug 3, 2026 · metrics 2.5.0
—
avsm/ocaml-yaml
OCaml interface to the YAML 1.1 spec
ISCJul 14, 2026 · metrics 2.5.0
crates.io
balliegojr/simple-dns
Simple DNS written in Rust
MITJul 28, 2026 · metrics 2.5.0
Hex
beam-telemetry/telemetry_metrics_statsd
Telemetry.Metrics reporter for StatsD-compatible metric servers
MITJul 17, 2026 · metrics 2.5.0
Go · PyPI
belastingdienst/opr-paas
An operator providing a multi tenancy solution which allows DevOps teams to request a context for their project, which we like to call a 'Project as a service', e.a. Paas.
EUPL-1.2Jul 20, 2026 · metrics 2.5.0
npm
carbon-design-system/carbon-preprocess-svelte
Svelte preprocessors for the Carbon Design System
Apache-2.0Jul 30, 2026 · metrics 2.5.0
crates.io
casey/boilerplate
A statically-checked Rust Template Engine
CC0-1.0Aug 2, 2026 · metrics 2.5.0
Maven
cdancy/bitbucket-rest
Java client, built on top of jclouds, for working with Bitbucket's REST API
Apache-2.0Jul 26, 2026 · metrics 2.5.0