Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
81,936
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
NuGet
steffenskov/StrongTypedId
A super small library for providing strong typed Ids (as opposed to using primitives)
MITSep 15, 2026 · metrics 2.10.0
crates.io
stepancheg/ordinal-map
Map types to integers
No licenseSep 16, 2026 · metrics 2.10.0
npm
sto-info-app/sto-info-frontend
An Angular application designed to provide information related to STO (Star Trek Online) player's accounts, characters and fleets.
MITSep 16, 2026 · metrics 2.10.0
crates.io
strawlab/lstsq
Return the least-squares solution to a linear matrix equation (rustlang, nalgebra)
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
stribog-cloud/KubeVigil
Kubernetes Security Posture Management (KSPM) CLI Tool
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go · npm
stuttgart-things/dagger
collection of dagger modules
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
sudorandom/protojsonx
Fast and conformant protojson library for Go
MITSep 16, 2026 · metrics 2.10.0
npm
surgioproject/packages
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
sweet-juice/sweetjuice
Sweet Juice - build smooth mobile apps with Go
MITSep 19, 2026 · metrics 2.10.0
PyPI
switchbox-data/buildstock-fetch
Library that simplifies downloading building characteristics and load curve data from NREL's ResStock and ComStock projects.
MITSep 20, 2026 · metrics 2.10.0
Packagist
symfony-swoole/resetter-bundle
Set of connection resetters for long running apps (swoole, message consumers)
MITSep 16, 2026 · metrics 2.10.0
Packagist
symfony/infobip-mailer
Symfony Infobip Mailer Bridge
MITSep 17, 2026 · metrics 2.10.0
Packagist
symfony/infobip-notifier
Symfony Infobip Notifier Bridge
MITSep 17, 2026 · metrics 2.10.0
Packagist
symfony/light-sms-notifier
Symfony LightSms Notifier Bridge
MITSep 17, 2026 · metrics 2.10.0
Packagist
symfony/phrase-translation-provider
Symfony Phrase Translation Provider Bridge
MITSep 17, 2026 · metrics 2.10.0
RubyGems
synesissoftware/xqsr3
eXtensions by fine Quantum for Standard Ruby and 3rd-party libraries
Custom licenseSep 18, 2026 · metrics 2.10.0
NuGet
szawaski/Zerra
.NET CQRS Framework with AOT
MITSep 15, 2026 · metrics 2.10.0
npm
szhsin/jest-dom-extended
Extend and patch @testing-library/jest-dom matchers
MITSep 17, 2026 · metrics 2.10.0
Go
taigrr/gotify-mcp
A Model Context Protocol (MCP) server that lets LLMs and AI assistants send push notifications to a Gotify server.
0BSDSep 19, 2026 · metrics 2.10.0
Go
takeshy/mcp-gatekeeper
Secure MCP server with JSON plugin configuration, multiple sandbox modes, glob-based policy control, and MCP Apps UI support
No licenseSep 20, 2026 · metrics 2.10.0
Go
tamcore/ephemeron
Ephemeral OCI container registry manager — push images with a TTL, they auto-expire
No licenseSep 19, 2026 · metrics 2.10.0
Go
tawAsh1/batchkoi
deployment tool for AWS Batch
MITSep 19, 2026 · metrics 2.10.0
Go
tbckr/trident
CLI tool for OSINT investigations
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
tbeseda/array-treeify
Simple text tree diagrams from arrays.
MITSep 15, 2026 · metrics 2.10.0
PyPI · npm
teddyoweh/mantis-agent-sdk
Drop-in open-source agent SDK. Multi-model (Anthropic, OpenAI, Gemini, Bedrock, local), streaming, MCP, sub-agents. Built on msgspec + httpx + anyio.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
tencentcloud-sdk-php/faceid
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · crates.io · npm
teranos/QNTX
QNTX = Experiential ꩜ Learning ⌬ System ≡ Attestation +
MITSep 15, 2026 · metrics 2.10.0
npm
test-staged/test-staged
lint-staged for test changed files
No licenseSep 19, 2026 · metrics 2.10.0
Go
th13vn/solast-go
A Solidity Abstract Syntax Tree (AST) parser written in Go. Parse Solidity smart contracts into structured AST for analysis, transformation, and tooling.
MITSep 19, 2026 · metrics 2.10.0
npm
thatzacdavis/keycode-consts
A collection of constants and utility functions for keycodes.
GPL-3.0Sep 14, 2026 · metrics 2.10.0