Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,356
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
crates.io
brave/kuchikiki
(口利き) HTML tree-manipulation library for Rust
MITJul 17, 2026 · metrics 2.5.0
Go · npm
changkun/wallfacer
Chat, specs, tasks, and code. An autonomous engineering platform. Full autonomy when you trust it. Full control when you don't.
MITJul 17, 2026 · metrics 2.5.0
npm
codeledge/ra-tools
React Admin Tools, namely the Prisma Data Adapter
No licenseAug 1, 2026 · metrics 2.5.0
npm
crisp-oss/email-forward-parser
Parses forwarded emails and extracts original content.
MITJul 20, 2026 · metrics 2.5.0
npm
croct-tech/plug-react
Croct's official SDK for React.
MITJul 16, 2026 · metrics 2.5.0
npm
d3/d3-dispatch
Register named callbacks and call them with arguments.
ISCAug 4, 2026 · metrics 2.5.0
Go
dejo1307/archmcp
enola - MCP Architectural Snapshot Server and Knowledge Graph
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm
donnikitos/vite-plugin-php
Vite's speed and tooling to preprocess PHP-files!
MITJul 14, 2026 · metrics 2.5.0
PyPI
geopandas/geodatasets
Spatial data examples
BSD-3-ClauseAug 8, 2026 · metrics 2.5.0
crates.io
image-rs/image-webp
No repository description published.
Apache-2.0Jul 18, 2026 · metrics 2.5.0
—
inaka/elvis_core
The core of an Erlang linter
Custom licenseJul 17, 2026 · metrics 2.5.0
—
isaacs/inflight-DEPRECATED-DO-NOT-USE
Add callbacks to requests in flight to avoid async duplication
No licenseJul 22, 2026 · metrics 2.5.0
NuGet
krafs/Publicizer
MSBuild plugin for directly accessing non-public members in .NET assemblies.
MITJul 25, 2026 · metrics 2.5.0
Go · npm · PyPI
linuxfoundation/easycla
No repository description published.
MITAug 6, 2026 · metrics 2.5.0
PyPI
liran-funaro/sphinx-markdown-builder
A Sphinx extension to add markdown generation support.
MITJul 18, 2026 · metrics 2.5.0
npm
llblab/pi-telegram
Telegram runtime adapter for Pi
No licenseJul 20, 2026 · metrics 2.5.0
Packagist
lochmueller/calendarize
📆 Best TYPO3 Calendar ever 📆
No licenseJul 18, 2026 · metrics 2.5.0
PyPI
macrocosm-os/data-universe
A Bittensor subnet for collecting and storing valuable data for other subnets
MITJul 17, 2026 · metrics 2.5.0
RubyGems
maxmind/GeoIP2-ruby
Ruby API for GeoIP2 webservice client and database reader
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
mayan-finance/swap-sdk
npm package for sending cross-chain swap transactions
MITJul 30, 2026 · metrics 2.5.0
npm
microsoft/agent-host-protocol
Synchronized multi-client state for AI agent sessions
MITJul 14, 2026 · metrics 2.5.0
crates.io
microsoft/azure-devops-rust-api
Rust API crate for the Azure DevOps API
MITAug 3, 2026 · metrics 2.5.0
npm
palantir/osdk-ts
Typescript related OSDK libraries
No licenseJul 13, 2026 · metrics 2.5.0
PyPI · npm
pikselkroken/pixlstash
PixlStash helps you find things in an image library that's gotten out of hand. It imports and tags your images automatically, then lets you search by content or face, sort the keepers from the rubbish, and serve data to other tools (like ComfyUI) with a REST API. Use the desktop version or run it headless as a server.
GPL-3.0Jul 18, 2026 · metrics 2.5.0
npm
pinojs/pino-opentelemetry-transport
OpenTelemetry transport for Pino
MITJul 22, 2026 · metrics 2.5.0
npm · Maven · RubyGems
pinpong/react-native-google-maps-plus
React Native wrapper for Android & iOS Google Maps SDK.
MITJul 29, 2026 · metrics 2.5.0
Go
protolambda/eth2-val-tools
Some experimental tools to manage validators - use at your own risk
MITJul 19, 2026 · metrics 2.5.0
PyPI
pyscaffold/configupdater
🌴 Parser like ConfigParser but for updating configuration files
Custom licenseAug 8, 2026 · metrics 2.5.0
Go
quailyquaily/mister_morph
Unified Agent + reusable Go agent core.
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Go
quailyquaily/mistermorph
Unified Agent + reusable Go agent core.
Apache-2.0Jul 17, 2026 · metrics 2.5.0