Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
53,115
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
400B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist
wp-cli/core-command
Downloads, installs, updates, and manages a WordPress installation.
MITJul 20, 2026 · metrics 2.5.0
PyPI · Go
wso2/api-platform
AI-ready, GitOps-driven API platform for full lifecycle management across cloud, hybrid, and on-prem.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
Maven
wso2/carbon-registry
No repository description published.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
xdg-go/scram
Go implementation of RFC-5802 Salted Challenge Response Authentication Mechanism (SCRAM)
Apache-2.0Jul 30, 2026 · metrics 2.5.0
PyPI
zopefoundation/roman
Integer to Roman numerals converter
Custom licenseJul 21, 2026 · metrics 2.5.0
PyPI
61418/boto3-refresh-session
A drop-in replacement for boto3.Session named RefreshableSession. It automatically refreshes temporary AWS credentials, caches clients, and natively supports MFA providers. It also supports automatic temporary AWS security credential refresh for STS, IOT Core, and custom credential callables.
MPL-2.0Jul 29, 2026 · metrics 2.5.0
Packagist · npm
AsmitNepali/resized-column
Filament table column resize plugin.
Custom licenseJul 16, 2026 · metrics 2.5.0
crates.io · PyPI
Jij-Inc/ommx
Open standard for mathematical programming interoperability
Apache-2.0Jul 27, 2026 · metrics 2.5.0
—
JuliaCrypto/SHA.jl
A performant, 100% native-julia SHA1, SHA2, and SHA3 implementation
Custom licenseJul 26, 2026 · metrics 2.5.0
crates.io
LINBIT/drbd-reactor
Monitors DRBD resources via plugins.
Apache-2.0Aug 1, 2026 · metrics 2.5.0
npm · RubyGems
Mati365/ckeditor5-rails
🚀 CKEditor 5 Ruby Gem – a powerful WYSIWYG editor for Rails! Smooth integration with web components and helper methods. 💎 Supports GPL & commercial licenses, flexible CDN options, and translations. 🎨 Easy setup with presets, plugins, and async loading. ⚡
MITAug 6, 2026 · metrics 2.5.0
npm
OneSignal/onesignal-node-api
OneSignal Node Client
Custom licenseJul 27, 2026 · metrics 2.5.0
—
PacificBiosciences/pbtk
PacBio BAM toolkit
BSD-3-Clause-ClearJul 26, 2026 · metrics 2.5.0
Go · npm
PostHog/PostHog-go
Official PostHog Go library
MITJul 18, 2026 · metrics 2.5.0
Packagist · npm
SemanticMediaWiki/SemanticResultFormats
Provides additional visualizations (result formats) for Semantic MediaWiki
Custom licenseJul 16, 2026 · metrics 2.5.0
—
Supersonido/rebar_mix
rebar3 plugin for building Elixir dependencies with mix
Apache-2.0Jul 19, 2026 · metrics 2.5.0
—
ajberkley/cl-binary-store
A fast Common Lisp binary serializer/deserializer
BSD-3-ClauseJul 15, 2026 · metrics 2.5.0
PyPI
alexmojaki/pure_eval
Safely evaluate AST nodes without side effects
MITAug 4, 2026 · metrics 2.5.0
npm
art0rz/eslint-plugin-no-barrel-files
ESLint rule that disallows barrel files
ISCJul 15, 2026 · metrics 2.5.0
Hex
ash-project/ash_paper_trail
The extension for keeping an audit log of changes to your Ash resources.
No licenseJul 17, 2026 · metrics 2.5.0
PyPI
asottile/cfgv
Validate configuration and produce human readable error messages
MITAug 4, 2026 · metrics 2.5.0
Packagist · npm
atlas-php/atlas
An AI SDK for building agents and tools in Laravel applications
MITJul 20, 2026 · metrics 2.5.0
Packagist
auraphp/Aura.Html
Provides HTML escapers and helpers, including form input helpers.
BSD-2-ClauseJul 21, 2026 · metrics 2.5.0
—
autotools-mirror/libtool
GNU Libtool. Mirror of git://git.savannah.gnu.org/libtool.git
No licenseJul 27, 2026 · metrics 2.5.0
Packagist
avadev/AvaTax-REST-V2-PHP-SDK
Sales Tax API SDK for PHP and AvaTax REST
Apache-2.0Jul 27, 2026 · metrics 2.5.0
npm · Packagist
az-digital/az_quickstart
UArizona's web content management system built with Drupal.
GPL-2.0Jul 13, 2026 · metrics 2.5.0
npm
balena-io-modules/etcher-sdk
No repository description published.
Apache-2.0Jul 30, 2026 · metrics 2.5.0
Packagist
bgaze/bootstrap-form
Bootstrap 4 & 5 forms builder for Laravel 6+
MITJul 14, 2026 · metrics 2.5.0
Go
bluekeyes/patch2pr
Create pull requests from patches without cloning the repository
MITJul 25, 2026 · metrics 2.5.0
Go
buildkite/buildkite-mcp-server
Official MCP Server for Buildkite.
MITJul 15, 2026 · metrics 2.5.0