Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,333
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
crates.io
vlwkaos/ir
Fast local markdown search engine (with possible CJK support)
No licenseJul 18, 2026 · metrics 2.5.0
crates.io
ydb-platform/ydb-rs-sdk
No repository description published.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
RubyGems
zverok/yard-junk
Get rid of the junk in your YARD docs
MITJul 17, 2026 · metrics 2.5.0
npm
AsiaOstrich/universal-dev-standards
Universal, language-agnostic development standards for software projects. Includes coding standards, git workflows, testing guidelines, documentation structure, and AI collaboration rules.
Custom licenseJul 27, 2026 · metrics 2.5.0
Maven
FgForrest/evitaDB
evitaDB is a specialized database with an easy-to-use API for e-commerce systems. It is a low-latency NoSQL in-memory engine that handles all the complex tasks that e-commerce systems have to deal with on a daily basis. evitaDB is expected to act as a fast secondary lookup/search index used by front stores.
Custom licenseJul 24, 2026 · metrics 2.5.0
NuGet
HTMLElements/smart-blazor
Blazor UI Components & Examples
No licenseAug 8, 2026 · metrics 2.5.0
Go
MixinNetwork/bot-api-go-client
🤖️ Mixin API for Go
Apache-2.0Jul 18, 2026 · metrics 2.5.0
crates.io · npm
Naituw/AskHuman
Human-in-the-loop tool for answering questions from AI agents.
MITJul 14, 2026 · metrics 2.5.0
npm
Shyam20001/rsjs
Brahma-Firelight — A Rust-powered, memory-safe Node.js web framework built on Tokio + Hyper.
MITJul 24, 2026 · metrics 2.5.0
Packagist
Sylius/RefundPlugin
Basic refunds functionality for Sylius
MITJul 14, 2026 · metrics 2.5.0
npm
Telefonica/mistica-web
React components library for Telefonica Design System (Mistica)
MITJul 19, 2026 · metrics 2.5.0
npm
TryGhost/migrate
Command-line tools for migrating posts and members from platforms like Substack, WordPress, and Medium to Ghost
MITJul 18, 2026 · metrics 2.5.0
—
VerifyTests/Verify.EntityFramework
Extends Verify to allow verification of EntityFramework bits.
MITJul 15, 2026 · metrics 2.5.0
Go
amnezia-vpn/amneziawg-apple
AWG Apple fork
MITJul 27, 2026 · metrics 2.5.0
Go · PyPI
anchore/grype-db
No repository description published.
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Go · Maven
apache/camel-kamelets
Apache Camel Kamelets Repository
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Hex
beam-community/avro_ex
An Avro Library that emphasizes testability and ease of use.
MITJul 17, 2026 · metrics 2.5.0
—
benoitc/erlang-metrics
A generic interface to different metrics systems in Erlang.
Custom licenseJul 18, 2026 · metrics 2.5.0
npm
boopathi/babel-minify
:rotating_light: Project is Discontinued and I'm contributing here -
No licenseJul 28, 2026 · metrics 2.5.0
npm
bpmn-io/bpmn-js-i18n
Internationalization resources for bpmn-js
MITAug 1, 2026 · metrics 2.5.0
Go
chanzuckerberg/cztack
The CZI infrastructure stack.
MITJul 21, 2026 · metrics 2.5.0
npm · Go
chrismatix/grog
Grog is a mono-repo build tool that is agnostic on how you run your build commands, but instead focuses on caching and parallel execution.
MITJul 18, 2026 · metrics 2.5.0
crates.io
cobalt-org/kstring
String optimized for map keys
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Packagist
codeigniter4/devkit
Development toolkit for CodeIgniter libraries and projects
MITJul 24, 2026 · metrics 2.5.0
npm
colorjs/color-interpolate
Get interpolated color from a palette
No licenseJul 31, 2026 · metrics 2.5.0
Hex
dashbitco/nimble_zta
Add Zero Trust Auth (ZTA) to web apps running in your private cloud
No licenseJul 17, 2026 · metrics 2.5.0
Go
didil/inhooks
Incoming Webhooks Gateway built with Go. Uses Redis for storage/queueing.
LGPL-3.0Jul 14, 2026 · metrics 2.5.0
crates.io
divviup/janus
Experimental implementation of the Distributed Aggregation Protocol (DAP) specification.
MPL-2.0Jul 14, 2026 · metrics 2.5.0
Packagist · npm
dniccum/nova-phone-number
A Laravel Nova field to format and validate phone numbers.
MITJul 30, 2026 · metrics 2.5.0
RubyGems
docusign/docusign-esign-ruby-client
The Official DocuSign Ruby Library used to interact with the eSign REST API. Send, sign, and approve documents using this client.
MITJul 16, 2026 · metrics 2.5.0