Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,833
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
voxpelli/list-installed
A modern typed async alternative to read-installed / readdir-scoped-modules
0BSDSep 15, 2026 · metrics 2.10.0
npm
voxpelli/peowly
meow inspired parseArgs() based CLI parser. Also contains help text helpers
MITSep 15, 2026 · metrics 2.10.0
Go
watchthelight/HypergraphGo
A native HoTT (Homotopy Type Theory) kernel in Go, evolving from a hypergraph theory library.
MITSep 20, 2026 · metrics 2.10.0
RubyGems
wealthsimple-community/graphql-ruby-hive
GraphQL Hive integration for `graphql-ruby`.
MITSep 18, 2026 · metrics 2.10.0
—
weaveworks/policy-library
The policy-as-code library
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
webmachinelearning/webmcp-types
TypeScript Types Declarations for WebMCP
MITSep 15, 2026 · metrics 2.10.0
Go
weigod0122/tacacs-plus-go
Enterprise TACACS+ AAA server (RFC 8907) in Go — built-in web management portal, role-based access control, command-level authorization, approval workflow, and Feishu integration. 基于 Go 语言的企业级 TACACS+ AAA 服务器（RFC 8907）——内置 Web 管理门户、基于角色的访问控制、命令级授权、审批工作流以及飞书集成。
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm · Go · Maven +2
wickra-lib/wickra-backtest
Streaming-native backtester for the Wickra indicator library — backtest == live, in 10 languages (WIP).
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
wikimedia/mediawiki-libs-ObjectFactory
Construct objects from configuration instructions. Mirror of https://gerrit.wikimedia.org/g/mediawiki/libs/ObjectFactory See https://www.mediawiki.org/wiki/Developer_access for contributing.
GPL-2.0Sep 17, 2026 · metrics 2.10.0
Go
willackerly/rebar
Swarm collective learning & coordination framework with MCP-enabled ASK agents for enterprise-scale AI collaboration
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
wille/haprovider
Production ready High Availability load balancer for Ethereum/Solana nodes and RPC providers
MITSep 19, 2026 · metrics 2.10.0
—
wirenboard/wb-rules-system
Default system rules for Wiren Board
MITSep 19, 2026 · metrics 2.10.0
npm
wmfs/supercopy
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-decimal
Check if a character is decimal
MITSep 16, 2026 · metrics 2.10.0
Packagist
worksome/foggy-laravel
A Laravel wrapper for Foggy
MITSep 14, 2026 · metrics 2.10.0
Go · npm
x-z7a/zoal-honeycomb
No repository description published.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
x1hy9/Go-cms-scan
一个Go语言创造的cms扫描器
No licenseSep 16, 2026 · metrics 2.10.0
crates.io
xandlom/rs-pfcp
This project is a Rust implementation of the PFCP protocol, inspired by the go-pfcp library.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
xentral/laravel-api
A laravel package which contains a sophisticated API workflow
MITSep 16, 2026 · metrics 2.10.0
PyPI
xeondb/Xeondb
Xeondb is a real-time big data database that is designed to be fast, efficient, and easy to use. It is built on top of a custom storage engine that is optimized for high performance and low latency.
MITSep 18, 2026 · metrics 2.10.0
Go
xgo-dev/llar
Cloud-based Package Management Service
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
xord/beeps
A Simple Synthesis Library.
MITSep 16, 2026 · metrics 2.10.0
npm
yWorks/react-yfiles-core
This module provides shared functionality for the yFiles React components
Custom licenseSep 18, 2026 · metrics 2.10.0
RubyGems
yegor256/qbash
Simple executor of a bash commands from Ruby: it logs the output and checks the exit code
MITSep 14, 2026 · metrics 2.10.0
Packagist
yiisoft/psr-dummy-provider
Dummy PSR provider
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Go
zeabur/stratus
Read-only OCI Distribution Spec v1 registry backed by S3, with a Go library for pushing BuildKit OCI images.
MPL-2.0Sep 18, 2026 · metrics 2.10.0
—
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
MITSep 20, 2026 · metrics 2.10.0
Go
zgsm-sangfor/chat-rag
A prompt engine that enhances generation capabilities through RAG
MITSep 20, 2026 · metrics 2.10.0