Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,318
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
avivsinai/agent-message-queue
File-based message queue for local agent-to-agent communication (Maildir-style)
MITJul 14, 2026 · metrics 2.5.0
Packagist
bizley/yii2-jwt
JWT Integration for Yii 2
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Packagist
chiiya/passes
PHP library for creating iOS and Android Wallet Passes
MITJul 22, 2026 · metrics 2.5.0
Go
cnabio/cnab-go
A Go implementation of CNAB Core 1.0
MITJul 20, 2026 · metrics 2.5.0
npm
colyseus/uWebSockets-express
Express API compatibility layer for uWebSockets.js
MITAug 4, 2026 · metrics 2.5.0
RubyGems
customerio/customerio-ruby
A ruby client for the Customer.io event API.
MITJul 24, 2026 · metrics 2.5.0
npm
dappnode/DAppNodeSDK
dappnodesdk is a tool to mantain dappnode packages. It helps to initialize and publish an Aragon Package Manager Repository
GPL-3.0Jul 20, 2026 · metrics 2.5.0
npm
didilinkin/elf-taro
Taro 小程序 脚手架 (Taro 3 + Dva + Typescript + Immer) - 内置 Redux 计数器, 异步数据请求 与 腾讯小程序地图 demo
MITJul 23, 2026 · metrics 2.5.0
npm
diplodoc-platform/transform
Simple transformer YFM (Yandex Flavored Markdown) to HTML.
MITJul 20, 2026 · metrics 2.5.0
Go
docker/sbx-kits-contrib
Community repository for sbx kits
Apache-2.0Jul 17, 2026 · metrics 2.5.0
crates.io
dragonflyoss/client
Dragonfly client written in Rust
Apache-2.0Jul 21, 2026 · metrics 2.5.0
Packagist
drupal/core-recommended
Metapackage that builds specific versions of drupal core based off of a lockfile.
No licenseJul 14, 2026 · metrics 2.5.0
npm
eyereasoner/eye-js
A distribution of EYE reasoner in the JavaScript ecosystem using Webassembly.
MITJul 17, 2026 · metrics 2.5.0
Go
fatedier/golib
Golang packages used in frp and fft.
Apache-2.0Aug 1, 2026 · metrics 2.5.0
npm
fei-protocol/flywheel-v2
General Token Incentives Infrastructure
AGPL-3.0Jul 22, 2026 · metrics 2.5.0
Go · npm
fiatjaf/pyramid
a wondrous furnace of communityzenship backed by a dynamic ladder of socialhood
UnlicenseAug 8, 2026 · metrics 2.5.0
Go
getaxonflow/axonflow
AxonFlow: Runtime control layer for production AI
Custom licenseJul 21, 2026 · metrics 2.5.0
Go
grafana/grafana-app-sdk
An SDK for developing apps for grafana using kubernetes-like storage and operators
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Go · npm
heroiclabs/nakama-common
The runtime framework for Nakama server.
Apache-2.0Jul 16, 2026 · metrics 2.5.0
Go
hoffie/sshified
Acts as an HTTP proxy and forwards all received requests over server-specific SSH connections
Apache-2.0Jul 19, 2026 · metrics 2.5.0
Packagist
illuminate/translation
[READ ONLY] Subtree split of the Illuminate Translation component (see laravel/framework)
MITJul 15, 2026 · metrics 2.5.0
—
ionide/dotnet-proj-info
Parse and evaluate MsBuild project files
MITJul 18, 2026 · metrics 2.5.0
Go
itering/scale.go
Golang polkadot substrate scale codec
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
jaredhanson/utils-merge
merge() utility function
MITAug 4, 2026 · metrics 2.5.0
crates.io
jblindsay/whitebox_next_gen
Whitebox Next Generation Rust monorepo
No licenseJul 31, 2026 · metrics 2.5.0
Packagist
jhedstrom/DrupalDriver
A collection of drivers for controlling Drupal.
GPL-2.0Jul 28, 2026 · metrics 2.5.0
crates.io
kas-gui/impl-tools
Helper macros: autoimpl, impl_scope
Apache-2.0Jul 22, 2026 · metrics 2.5.0
PyPI
kmike/text-unidecode
The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)
Custom licenseJul 20, 2026 · metrics 2.5.0
Packagist
laravie/serialize-queries
Serializable Laravel Query Builder
MITJul 23, 2026 · metrics 2.5.0
npm · RubyGems
lokalise/node-lokalise-api
Lokalise API v2 Node.js client.
Custom licenseJul 13, 2026 · metrics 2.5.0