Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
53,145
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
400B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
PyPI
hyriver/py3dep
A part of HyRiver software stack for getting topography data within the US through 3D Elevation Program (3DEP)
Custom licenseJul 14, 2026 · metrics 2.5.0
Packagist
inpsyde/modularity
A PSR-11 implementation for WordPress Plugins, Themes or Libraries.
GPL-2.0Aug 4, 2026 · metrics 2.5.0
Go
jfrog/froggit-go
Froggit-Go is a universal Go library, allowing to perform actions on VCS providers.
Apache-2.0Aug 1, 2026 · metrics 2.5.0
npm
jonathanong/ee-first
return the first event in a set of ee/event pairs
MITAug 4, 2026 · metrics 2.5.0
npm
kikobeats/json-future
Modern JSON interface.
MITJul 17, 2026 · metrics 2.5.0
Hex
kipcole9/astro
Astronomical functions in Elixir focused on sun, moon and calendrical calculations
Custom licenseAug 2, 2026 · metrics 2.5.0
npm · PyPI
l4rm4nd/pyadrecon-adws
An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.
MITJul 13, 2026 · metrics 2.5.0
Hex
lebrunel/anthropix
Unofficial Anthropic API client for Elixir. Integrate Claude, Anthropic's powerful language model, into your applications.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
lestrrat-go/helium
XML Toolkit for Go (XML/SAX2/XPath 3.1/XSLT 3.0/XInclude/XSD/RelaxNG/Schematron/C14N)
MITAug 3, 2026 · metrics 2.5.0
—
lpil/envoy
📂 A zero dependency cross platform Gleam package for reading environment variables
No licenseJul 17, 2026 · metrics 2.5.0
Packagist
madewithlove/license-checker-php
CLI tool to verify used licenses in composer dependencies
MITJul 23, 2026 · metrics 2.5.0
Packagist
magefan/module-lazyload
No repository description published.
Custom licenseJul 14, 2026 · metrics 2.5.0
NuGet
mamift/LinqToXsdCore
LinqToXsd ported to .NET Core (targets .NET Standard 2 for generated code and .NET Core 3.1, .NET 5+ for the code generator CLI tool).
MS-PLJul 20, 2026 · metrics 2.5.0
—
matrix-org/matrix-rust-components-swift
Swift package providing components from the matrix-rust-sdk
Apache-2.0Jul 18, 2026 · metrics 2.5.0
PyPI
mbohlkeschneider/gluon-ts
GluonTS - Probabilistic Time Series Modeling in Python
Apache-2.0Jul 17, 2026 · metrics 2.5.0
—
medo64/Medo.Uuid7
This is a C# implementation of UUIDv7 generation algorithm.
MITJul 18, 2026 · metrics 2.5.0
crates.io · npm
melbournedeveloper/osprey
A modern functional programming language designed for elegance, safety, and performance. Written in Rust, outputs to LLVM.
Custom licenseJul 14, 2026 · metrics 2.5.0
npm
microsoft/fluentui-contrib
Monorepo for contributor extension packages to Fluent UI
MITJul 17, 2026 · metrics 2.5.0
PyPI
mprahboamey/atom
optical attention via wave interference in holographic crystals verified to float precision. the math is done. contribute to build the hardware.star it, fork it, break it.
MITJul 17, 2026 · metrics 2.5.0
Packagist · npm
muxinc/mux-php
Official Mux API wrapper for PHP projects, supporting both Mux Data and Mux Video.
MITJul 18, 2026 · metrics 2.5.0
crates.io · npm · PyPI
nabbisen/mdka-rs
A HTML to Markdown (MD) converter balances conversion quality with runtime efficiency.
Apache-2.0Aug 3, 2026 · metrics 2.5.0
npm
npm/mute-stream
Bytes go in, but they don't come out (when muted).
ISCAug 4, 2026 · metrics 2.5.0
PyPI
nudomarinero/wquantiles
weighted quantiles with Python
MITJul 30, 2026 · metrics 2.5.0
Hex
phoenixframework/phoenix_template
Template rendering for Phoenix
MITJul 18, 2026 · metrics 2.5.0
crates.io
posthog/posthog-rs
Official PostHog Rust SDK
MITJul 14, 2026 · metrics 2.5.0
Go
replicatedhq/sbctl
No repository description published.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
npm
reportportal/agent-js-playwright
Agent to integrate Playwright with ReportPortal.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
RubyGems
ruby-jp/websocket-client-simple
Simple WebSocket Client on Ruby
MITJul 20, 2026 · metrics 2.5.0
RubyGems
ruby/cgi
CGI is a large class, providing several categories of methods, many of which are mixed in from other modules.
Custom licenseJul 16, 2026 · metrics 2.5.0
—
sbt/librarymanagement
librarymanagement module for sbt
Apache-2.0Jul 25, 2026 · metrics 2.5.0