Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,744
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
syntatis/utils-php
🧰 Handy PHP functions
MITSep 15, 2026 · metrics 2.10.0
Go
taigrr/adb
Idiomatic, context-aware Android Debug Bridge (adb) bindings for Go: structured results, typed errors, device control, and input record/replay.
0BSDSep 19, 2026 · metrics 2.10.0
Go
taigrr/ssh-mcp
MCP server providing persistent, agent-authenticated SSH sessions for AI coding agents — resolves ~/.ssh/config hosts and exposes a virtual terminal over the Model Context Protocol
0BSDSep 19, 2026 · metrics 2.10.0
Go
thedatafoundation/story-geth
Go implementation of the Ethereum protocol
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
thoth-pub/thoth-client
Python client for Thoth's APIs
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
tidal-music/cw-alert-router
Route Cloudwatch alarms to Slack and/or PagerDuty
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io · Go
tj-smith47/cfgd
Declarative, GitOps-inspired, shareable tooling and machine configurations.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
tollwing/tollwing
Per-pod Kubernetes network cost, by AWS billing path. An eBPF agent that attributes every byte to the pod paying for it, and gets cross-AZ right.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
tonylturner/cipdip
Protocol-aware CIP/EtherNet-IP deep packet inspection test harness for evaluating industrial firewall DPI engines
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
torrplay/torrplay
TorrPlay is a torrent streaming application.
MITSep 20, 2026 · metrics 2.10.0
npm
traceroot-ai/traceroot-ts
TypeScript SDK for TraceRoot
Apache-2.0Sep 18, 2026 · metrics 2.10.0
—
travelping/fpp-vpp
Base for VPP based subprojects
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
trim21/bencode-py
A fast and correct bencode serialize/deserialize library in python
MITSep 15, 2026 · metrics 2.10.0
Go
tsuru/go-tsuruclient
Tsuru go client generated from the swagger spec
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go · npm
ugent-library/biblio-backoffice
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
upbound/function-claude
Compose resources using Claude AI
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
userflow/userflow.js
Async loader for Userflow.js
MITSep 15, 2026 · metrics 2.10.0
npm
vafast/vafast
Vafast 框架官方中文文档 - 高性能 Node.js Web 框架
MITSep 19, 2026 · metrics 2.10.0
crates.io
vakamo-labs/openfga-client
OpenFGA Rust Client is a type-safe client for OpenFGA with optional Authorization Model management and Authentication.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
valeriogalano/podcast-feed-hugo
Hugo module for generating standards-compliant podcast RSS feeds with iTunes and Podcast Index namespace support
GPL-3.0Sep 19, 2026 · metrics 2.10.0
—
vcabbage/trivialt
Go TFTP library with full standards support.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
viamin/aidp
A CLI for AI-driven software development, from analysis to execution.
MITSep 15, 2026 · metrics 2.10.0
Go
vivid-money/vtunnel
No repository description published.
No licenseSep 14, 2026 · metrics 2.10.0
PyPI
vjt/ha-eisenberg
Arlo cameras integration for HA done right
MITSep 17, 2026 · metrics 2.10.0
Go
vodolaz095/ldap4gin
Authenticator for gin framework using ldap server
MITSep 20, 2026 · metrics 2.10.0
npm
voxpelli/node-installed-check-core
Checks whether installed modules fulfills the requirements of package.json
MITSep 15, 2026 · metrics 2.10.0
npm
voxpelli/validate-conventional-commit
Smallest simplest conventional commit validator to use with eg Husky
0BSDSep 18, 2026 · metrics 2.10.0
Packagist
webapix/dot-net-json-date-formatter
Parse .Net JSON dates to DateTime object, and convert DateTime object to .Net JSON date format.
MITSep 15, 2026 · metrics 2.10.0
Packagist
webeweb/core-library
Core library
MITSep 15, 2026 · metrics 2.10.0
Packagist
wikimedia/mediawiki-libs-XMPReader
Reader for XMP data containing properties relevant to images. Mirror from https://gerrit.wikimedia.org/g/mediawiki/libs/XMPReader - our actual code is hosted with Gerrit (please see https://www.mediawiki.org/wiki/Developer_access for contributing)
GPL-2.0Sep 17, 2026 · metrics 2.10.0