Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,871
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
weave-io/weave
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
Go
weilun-shrimp/wlgows
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Packagist
wikimedia/WrappedString
Mirror of https://gerrit.wikimedia.org/g/WrappedString. See https://www.mediawiki.org/wiki/Developer_access for contributing.
MITSep 17, 2026 · metrics 2.10.0
Packagist
wikimedia/mediawiki-libs-ScopedCallback
Class for asserting that a callback happens when a dummy object leaves scope. Mirror from https://gerrit.wikimedia.org/g/mediawiki/libs/ScopedCallback - our actual code is hosted with Gerrit (please see https://www.mediawiki.org/wiki/Developer_access for contributing)
GPL-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
wikimedia/mediawiki-libs-Zest
Mirror of https://gerrit.wikimedia.org/g/mediawiki/libs/Zest - Please see https://www.mediawiki.org/wiki/Developer_access for contributing.
MITSep 17, 2026 · metrics 2.10.0
npm
wmfs/asl-choice-processor
For determining the next state given an Amazon States Language "Choices" definition and a set of values.
MITSep 18, 2026 · metrics 2.10.0
npm
wmfs/tymly-core
An open framework for building digital services.
MITSep 18, 2026 · metrics 2.10.0
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITSep 16, 2026 · metrics 2.10.0
Packagist · npm
wp-media/phpunit
PHPUnit Common Testing Suite
GPL-2.0Sep 14, 2026 · metrics 2.10.0
PyPI
wuxuedaifu/vllm-surya-ocr
OpenAI-compatible, vLLM-served OCR API for the Surya-OCR-2 model — multilingual document OCR (layout + text recognition) with request batching, a local CLI, and Docker packaging.
MITSep 19, 2026 · metrics 2.10.0
npm
wycto/dsh-token-usage
基于dsh的token用量统计，DSH的Token用量统计功能
MITSep 18, 2026 · metrics 2.10.0
Go
xfeldman/aegisvm
Local, scale-to-zero microVM runtime for autonomous agent workloads
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
xmc-rs/xmc4300
XMC4300 Peripheral interface library generated from an SVD
MITSep 18, 2026 · metrics 2.10.0
Go
xmidt-org/wrp-go
go implementation of the Web Routing Protocol
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · Go · npm
xraph/farp
An API Gateway/Service Registration and Discovery Manifest Protocol
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
yarrasys/kdbx
Per-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
MITSep 20, 2026 · metrics 2.10.0
PyPI
yeaboi-ai/yeaboi.ai
yeaboi — AI Scrum Master in your terminal: sprint planning, standups, retros, planning poker, 1:1s and delivery reports for your team, plus cost, daily digests and security posture for the AI coding agents working alongside it.
MITSep 15, 2026 · metrics 2.10.0
Packagist
yii2-extensions/scaffold
Composer plugin for composable Yii2 application scaffolds: replace / preserve / append / prepend modes, sha256-tracked lock, and scaffold/* CLI commands.
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
youyo/logvalet
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI · npm
yu314-coder/python_to_binary
Pure-Python Python-to-C, native ELF/PE/Mach-O compiler, and CPython application bundler
MITSep 17, 2026 · metrics 2.10.0
—
yusei36/FluentPassFinder
KeePass Plugin with a Fluent Design search window to quickly find entries and autotype or copy passwords and other fields. A global shortcut opens the search window from anywhere.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go · npm
zeroedin/alloy
A fast, extensible static site generator. Built in Go.
MITSep 19, 2026 · metrics 2.10.0
npm
zhChuXiao/vitepress-theme-ninc
> 一个功能丰富的 VitePress 主题 — 开箱即用的博客、文档与工具站。本仓库为 monorepo，包含主题包、示例站点与文档站。 ##
MITSep 16, 2026 · metrics 2.10.0
Go
zhivko-kocev/friday
One CLI to manage AI agent configs from a single canonical store. One YAML source renders onto Claude Code, Codex, Copilot, OpenCode, Gemini and oh-my-pi: instructions, MCP servers, permissions and settings. Push to every agent, pull edits back, sync across machines via git.
MITSep 15, 2026 · metrics 2.10.0
npm
zhizhuodemao/patchright-mcp
Patchright fork for js-reverse-mcp with protocol-level observable-side-effect fixes
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
zl21st/tcpstun
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
npm
0disoft/service-catalog-generator
Manifest-first service catalog generator and linter for local and CI workflows.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm · crates.io
1broseidon/hotline
A local-first room for your team of coding agents. Rust and Tauri; the built-in agent or any harness over the Agent Client Protocol.
Apache-2.0Sep 19, 2026 · metrics 2.10.0