Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,352
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
arangodb-helper/arangodb
ArangoDB Starter - starts ArangoDB clusters & single servers with ease.
Apache-2.0Jul 19, 2026 · metrics 2.5.0
npm · Go
asyncapi/spec-json-schemas
AsyncAPI schema versions
Apache-2.0Jul 16, 2026 · metrics 2.5.0
Go
aws/aws-network-policy-agent
Network Policy Agent is a daemonset that is responsible for enforcing configured network policies on the cluster.
Apache-2.0Aug 4, 2026 · metrics 2.5.0
Packagist
beste/clock
⏱ A collection of Clock implementations.
MITJul 18, 2026 · metrics 2.5.0
Go
bestnite/bilinovel-downloader
bilinovel 轻小说下载工具
MITJul 21, 2026 · metrics 2.5.0
Packagist
chargebee/chargebee-php
PHP library for the Chargebee API.
MITJul 21, 2026 · metrics 2.5.0
RubyGems
civisanalytics/ruby_audit
Checks Ruby and RubyGems against known security vulnerabilities.
Custom licenseJul 20, 2026 · metrics 2.5.0
RubyGems
codecov/codecov-ruby
Ruby uploader for Codecov
MITJul 20, 2026 · metrics 2.5.0
crates.io · PyPI
cyberlife-coder/VelesDB
The local-first memory engine for AI agents. One offline Rust binary fuses vector + graph + columnar under SQL — remember / recall / why over the Model Context Protocol. why() reconnects a decision to its context across sessions, where pure vector recall (Mem0/Zep) goes blind. Runs on server, laptop, browser, edge. Zero cloud.
Custom licenseJul 15, 2026 · metrics 2.5.0
Go
diegoclair/goswag
No repository description published.
MITJul 25, 2026 · metrics 2.5.0
Go
dotzero/git-profile
↔️ Git Profile helps you manage multiple Git identities and switch between them per repository
MITJul 20, 2026 · metrics 2.5.0
crates.io
dylni/os_str_bytes
Lossless functionality for platform-native strings.
Custom licenseJul 17, 2026 · metrics 2.5.0
Packagist
editorconfig-checker/editorconfig-checker.php
A tool to verify that your files are in harmony with your .editorconfig
MITJul 28, 2026 · metrics 2.5.0
Go
enola-labs/enola
enola - MCP Architectural Snapshot Server and Knowledge Graph
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm
grafana/openapi-to-k6
A CLI tool to convert an OpenAPI schema to a TypeScript client to use with k6.
AGPL-3.0Jul 30, 2026 · metrics 2.5.0
Go
hashicorp/go-secure-stdlib
No repository description published.
MPL-2.0Jul 30, 2026 · metrics 2.5.0
Go
hyperledger-labs/fabric-smart-client
The Fabric Smart Client is a framework that lets you focus on the business processes and simplifies the development of Fabric(x)-based distributed application.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
Go
javinizer/javinizer-go
Javinizer written in Go and Svelte. This is a modern replacement for the original Javinizer. (NSFW) Organize your local Japanese Adult Video (JAV) library.
MITJul 17, 2026 · metrics 2.5.0
crates.io
jedisct1/rust-siphash
SipHash (2-4, 1-3 + 128 bit variant) implementations for Rust
Custom licenseAug 3, 2026 · metrics 2.5.0
PyPI · npm · crates.io
jessekrubin/ry
ry ~ rust-python
Custom licenseAug 1, 2026 · metrics 2.5.0
Go
jmooring/hvm
Hugo Version Manager
Apache-2.0Jul 16, 2026 · metrics 2.5.0
npm
jsdom/data-urls
Parse data: URLs
MITAug 4, 2026 · metrics 2.5.0
Go · PyPI
junioryono/godi
Dependency Injection with Service Lifetimes for Go
MITJul 27, 2026 · metrics 2.5.0
RubyGems
knu/ruby-unf
A wrapper library to bring Unicode Normalization Form support to Ruby/JRuby
BSD-2-ClauseJul 20, 2026 · metrics 2.5.0
Packagist
laminas/laminas-view
Flexible view layer supporting and providing multiple view layers, helpers, and more
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
—
lrascao/rebar3_appup_plugin
A rebar3 plugin for frictionless release upgrades
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Packagist
magefan/module-wysiwyg-advanced
Extend TinyMCE 4 & 5 tools in Magento 2
No licenseAug 6, 2026 · metrics 2.5.0
Packagist
masterix21/laravel-addressable
Make your Eloquent models addressable.
MITJul 31, 2026 · metrics 2.5.0
Packagist
mostafaznv/larupload
Larupload is an ORM based file uploader for laravel to upload image, video, audio and other known files.
MITJul 20, 2026 · metrics 2.5.0
PyPI · npm
nodejsmith/hassette
Modern, async-first Python framework for building Home Assistant automations
MITJul 14, 2026 · metrics 2.5.0