Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
53,089
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
400B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
bolajiolajide/ng-banks
Lightweight Zero dependency npm package to get list of banks in Nigeria (Recognized by CBN)
No licenseJul 15, 2026 · metrics 2.5.0
Hex · npm
bonfire-networks/iconify_ex
Iconify
No licenseJul 17, 2026 · metrics 2.5.0
Hex
breakroom/sitemapper
Fast, stream based XML Sitemap generator in Elixir
MITJul 17, 2026 · metrics 2.5.0
Packagist
breezefront/module-breeze
Breeze Module
MITJul 17, 2026 · metrics 2.5.0
crates.io
cartridge-gg/slot
A toolchain for rapidly spinning up Katana and Torii instances. Play test your game in seconds.
GPL-3.0Jul 18, 2026 · metrics 2.5.0
npm
chalk/slice-ansi
Slice a string with ANSI escape codes
MITAug 4, 2026 · metrics 2.5.0
Packagist
coreydoughty/Fpdf
A composer wrapper around the great php FPDF class. All credit to them.
Custom licenseJul 20, 2026 · metrics 2.5.0
Hex
corka149/jsonpatch
A implementation of RFC 6902 in pure Elixir.
MITJul 17, 2026 · metrics 2.5.0
Go
cristianoliveira/aerospace-scratchpad
Scratchpad for AeroSpace WM
MITJul 18, 2026 · metrics 2.5.0
NuGet
csukuangfj/PortAudioSharp2
C# binding for portaudio supporting Linux, macOS, Windows, iOS
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Packagist · npm
dereuromark/cakephp-geo
A CakePHP plugin around geocoding tools and helpers.
MITAug 2, 2026 · metrics 2.5.0
npm
digital-alchemy-ts/core
Application wiring, configuration, and boilerplate utilities
MITJul 15, 2026 · metrics 2.5.0
npm
eclipse-glsp/glsp-client
Web-based client framework of the graphical language server platform
Custom licenseJul 31, 2026 · metrics 2.5.0
npm
fregante/webext-detect
Detects where the current browser extension code is being run. Chrome and Firefox.
MITJul 15, 2026 · metrics 2.5.0
Go
getzep/zep-go
Build Agents That Recall What Matters. Systematically engineer relevant context from chat history & business data. (Go SDK)
No licenseJul 19, 2026 · metrics 2.5.0
crates.io
git-meta/git-meta
git metadata spec and poc
MITJul 24, 2026 · metrics 2.5.0
Go
go-openapi/jsonpointer
jsonpointer for golang with support for structs
Apache-2.0Jul 28, 2026 · metrics 2.5.0
Go
goccy/go-spidermonkey
SpiderMonkey in pure Go — run untrusted JavaScript anywhere Go runs. No cgo, no WebAssembly runtime, one static binary.
MITJul 29, 2026 · metrics 2.5.0
Go
goccy/tobari
Tobari is a scoped coverage measurement tool for Go
Custom licenseJul 18, 2026 · metrics 2.5.0
Go
grindlemire/go-lucene
A pure go lucene parser with no dependencies.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
grindlemire/go-search
A pure go lucene parser with no dependencies.
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Go
hmgle/httpseal
HTTPSeal is a Linux command-line tool for intercepting and analyzing HTTPS traffic from specific processes using namespace isolation and DNS hijacking
MITJul 18, 2026 · metrics 2.5.0
Maven
ice1000/code_wars_android
:computer: A mobile client for CodeWars
AGPL-3.0Aug 3, 2026 · metrics 2.5.0
—
jrstrunk/tempo
A datetime-centric, mockable time library for Gleam!
Apache-2.0Jul 17, 2026 · metrics 2.5.0
PyPI
karpetrosyan/httpx-aiohttp
aiohttp-powered httpx client
BSD-3-ClauseJul 18, 2026 · metrics 2.5.0
Go
kkHAIKE/contextcheck
Analyzer: check whether a function uses a non-inherited context
Apache-2.0Aug 4, 2026 · metrics 2.5.0
NuGet
kostebudinoski/SunCalcNet
A .NET port of the SunCalc JS lib for calculating sun/moon positions and phases.
MITJul 27, 2026 · metrics 2.5.0
PyPI
lxml/lxml-stubs
Type stubs for the lxml package
Custom licenseJul 21, 2026 · metrics 2.5.0
Go
maratori/testpackage
Golang linter that encourages you to use a separate _test package
MITAug 4, 2026 · metrics 2.5.0
Go
meinside/telegram-bot-go
Telegram Bot API wrapper for Golang
Custom licenseJul 18, 2026 · metrics 2.5.0