Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,398
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
open-feature/go-sdk-contrib
Community maintained OpenFeature Providers and Hooks for Go
Apache-2.0Jul 29, 2026 · metrics 2.5.0
npm
openwallet-foundation/sd-jwt-js
A JavaScript implementation of the Selective Disclosure JWT (SD-JWT) spec.
Apache-2.0Jul 24, 2026 · metrics 2.5.0
crates.io
pacman82/arrow-odbc
Fill Apache Arrow record batches from an ODBC data source in Rust.
MITJul 20, 2026 · metrics 2.5.0
Go
pseudomuto/protokit
A starter kit for building protoc plugins. Rather than write your own, you can just use an existing one.
MITJul 30, 2026 · metrics 2.5.0
Go
pthm/melange
OpenFGA-to-PostgreSQL authorization compiler. Generates specialized SQL functions from .fga schemas that query your existing tables. Zero sync, always consistent.
MITJul 14, 2026 · metrics 2.5.0
PyPI
pytest-dev/pytest-forked
extracted --boxed from pytest-xdist to ensure backward compat
MITJul 18, 2026 · metrics 2.5.0
PyPI
python-trio/trio-websocket
WebSocket client and server implementation for Python Trio
MITJul 18, 2026 · metrics 2.5.0
PyPI
pytroll/pyspectral
Pyspectral is a package to read and manipulate satellite sensor spectral responses and solar irradiance spectra
Apache-2.0Jul 26, 2026 · metrics 2.5.0
crates.io
rakaly/jomini
Low level, performance oriented parser for save and game files from EU4, EU5, CK3, HOI4, Vic3, Imperator, and other PDS titles.
MITJul 13, 2026 · metrics 2.5.0
Packagist
ralphjsmit/livewire-urls
Get the previous and current url in Livewire.
MITJul 22, 2026 · metrics 2.5.0
crates.io
rkyv/bytecheck
Memory validation framework for Rust
MITAug 6, 2026 · metrics 2.5.0
crates.io
rust-lang/jobserver-rs
No repository description published.
Apache-2.0Jul 22, 2026 · metrics 2.5.0
npm
samfoy/pi-memory
Persistent memory for pi — learns corrections, preferences, and patterns from sessions
MITJul 17, 2026 · metrics 2.5.0
Go
sanonone/kektordb
AI memory system combining vector search with temporal knowledge graph. Built-in cognitive engine for agents. Supports memory decay, contradiction detection, and MCP integration.
Custom licenseJul 18, 2026 · metrics 2.5.0
npm
sindresorhus/is-retry-allowed
Check whether a request can be retried based on the `error.code`
MITAug 4, 2026 · metrics 2.5.0
Go
skycoin/skywire
Skywire Node implementation
No licenseJul 29, 2026 · metrics 2.5.0
Maven
snowflakedb/snowflake-ingest-java
Java SDK for the Snowflake Ingest Service -
Apache-2.0Jul 27, 2026 · metrics 2.5.0
Packagist
stefanak-michal/php-bolt-driver
PHP library to provide connectivity to graph database over TCP socket with Bolt specification
MITJul 24, 2026 · metrics 2.5.0
crates.io
stratis-storage/devicemapper-rs
A Rust library for using Linux devicemapper
MPL-2.0Jul 31, 2026 · metrics 2.5.0
Packagist
sunrise-php/vin
Simple VIN decoder for PHP 7.1+ based on ISO-3779
MITJul 25, 2026 · metrics 2.5.0
npm
svt/bridge
An extensible client for controlling real time graphics
Custom licenseJul 21, 2026 · metrics 2.5.0
npm
syntax-tree/unist-util-visit-parents
utility to recursively walk over unist nodes, with ancestral information
MITAug 4, 2026 · metrics 2.5.0
PyPI
synth-laboratories/synth-ai
Synth Python SDK for Managed Research, Research Factory, and GEPA/GELO optimizer workflows.
MITJul 30, 2026 · metrics 2.5.0
PyPI
tensorcircuit/tensorcircuit-ng
Next-gen AI-native tensor-network-based quantum software framework
Apache-2.0Jul 13, 2026 · metrics 2.5.0
npm
terkelg/sisteransi
ANSI escape codes for some terminal swag.
MITAug 4, 2026 · metrics 2.5.0
npm
vigolium/piolium
A Pi-native extension for thorough, agentic security audits
MITJul 29, 2026 · metrics 2.5.0
—
vindar/ili9341_t4
Optimized ILI9341 screen driver library for Teensy 4/4.1, with vsync and diff. updates.
LGPL-2.1Jul 14, 2026 · metrics 2.5.0
npm
vmactions/openbsd-vm
Use OpenBSD in github actions
MITJul 21, 2026 · metrics 2.5.0
npm
w3c/reffy
Reffy is a Web spec crawler and analyzer tool. It is notably used to update Webref
MITJul 18, 2026 · metrics 2.5.0
Packagist
wp-phpunit/wp-phpunit
WordPress core PHPUnit library. [READ ONLY] Versions for new WordPress releases are built daily.
No licenseJul 18, 2026 · metrics 2.5.0