Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,849
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
flipbook-labs/storyteller
Discovery and rendering of UI stories in Roblox, the engine powering Flipbook
MITSep 17, 2026 · metrics 2.10.0
Go
fmotalleb/junction
A simple configurable reverse proxy that uses socks and/or ssh as transport layer, with builtin support for SNI and Http-Header based autorouting.
GPL-2.0Sep 15, 2026 · metrics 2.10.0
Go
fox-toolkit/waf
Coraza WAF middleware for Fox
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
fpedd/omnimalloc
State-of-the-art static memory allocation for neural networks.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
fr123k/confluence-slackbot
Slack bot that performs a search in confluence and post back the results to a slack channel.
No licenseSep 19, 2026 · metrics 2.10.0
RubyGems
fukayatsu/antbird
Nearly auto-generated Elasticsearch client
MITSep 15, 2026 · metrics 2.10.0
Go
futuretea/yunxiao-mcp-server
MCP server for Alibaba Yunxiao (云效)
MITSep 19, 2026 · metrics 2.10.0
PyPI · crates.io
gaspatchio/gaspatchio
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
NuGet
georgepwall1991/automapper-analyser
A Roslyn analyser for AutoMapper that catches missing and misconfigured mappings at compile time.
MITSep 18, 2026 · metrics 2.10.0
Go · npm
getpipe-dev/pipe
Replace chained shell aliases with a structured, pipeline-style workflow
MITSep 19, 2026 · metrics 2.10.0
Go
giantswarm/rbac-operator
Operator which manages customer's access to the Giant Swarm Management API
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
git-pkgs/licenses
Go library and CLI for fast license detection and repository scanning against ScanCode's rule corpus.
MITSep 20, 2026 · metrics 2.10.0
PyPI
gityoav/pyg-timeseries
timeseries part of the pyg package
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
glimps-re/go-gdetect
GLIMPS GMalware detect client
MITSep 15, 2026 · metrics 2.10.0
Go
go-go-golems/parka
Convert your CLI apps to APIs
MITSep 19, 2026 · metrics 2.10.0
Go
go-gui-org/go-charts
Charting library for Go, built on go-gui. Immediate-mode rendering via DrawCanvas — no virtual DOM, no diffing, just fast composable charts.
MITSep 15, 2026 · metrics 2.10.0
Go
go-toolsmith/astcast
Package astcast wraps type assertion operations in such way that you don't have to worry about nil pointer results anymore.
MITSep 16, 2026 · metrics 2.10.0
Go · npm
goforj/goforj
The composable stack for building with Go
MITSep 19, 2026 · metrics 2.10.0
Go
gogpu/gpucontext
Shared GPU infrastructure for the gogpu ecosystem (DeviceProvider, EventSource, Registry)
MITSep 20, 2026 · metrics 2.10.0
Go
gohugoio/hugoTestModules1_darwin
Some autogenerated modules used in Hugo tests.
MITSep 19, 2026 · metrics 2.10.0
Go
golangci/plugin-module-register
No repository description published.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
gonest-dev/gonest
A NestJS-inspired dependency-injection and HTTP framework for Go
MITSep 14, 2026 · metrics 2.10.0
Packagist
googleapis/google-cloud-php-channel
No repository description published.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
googleapis/google-cloud-php-iam-credentials
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
googleapis/google-cloud-php-org-policy
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
googleapis/php-apps-meet
No repository description published.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · npm
gorewood/timbers
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
npm
gpujs/gpu-mock.js
A simple mocker for testing threaded development
MITSep 17, 2026 · metrics 2.10.0
Go
grab/grabfood-api-sdk-go
Go API client for GrabFood
MITSep 14, 2026 · metrics 2.10.0
Go
grafana/crocochrome
Chromium supervisor
AGPL-3.0Sep 15, 2026 · metrics 2.10.0