Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
53,059
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
400B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Go
absmach/supermq
Industrial IoT Messaging and Device Management Platform
Apache-2.0Jul 31, 2026 · metrics 2.5.0
PyPI
adamalton/django-csp-reports
Django app for handling browser reports from Content Security Policy violations
MITJul 14, 2026 · metrics 2.5.0
npm
aidanhibbard/nuxt-processor
Decoupled processing solution for Nuxt built with BullMQ
MITJul 26, 2026 · metrics 2.5.0
Hex
albert-io/optimal
A schema based keyword list option validator.
MITJul 17, 2026 · metrics 2.5.0
Go
alecthomas/go-check-sumtype
A simple utility for running exhaustiveness checks on Go "sum types."
UnlicenseAug 4, 2026 · metrics 2.5.0
Go
antithesisHQ/antithesis-sdk-go
Antithesis SDK for Go
MITJul 18, 2026 · metrics 2.5.0
Hex
beam-community/ua_parser
UserAgentParser implementation for Elixir
MITJul 17, 2026 · metrics 2.5.0
npm
ben-ng/add
A cross-browser, numerically stable algorithm that adds floats accurately in Javascript
No licenseJul 25, 2026 · metrics 2.5.0
Packagist
cakephp/cache
[READ-ONLY] Easy to use Caching library with support for multiple caching backends. This repo is a split of the main code that can be found in https://github.com/cakephp/cakephp
Custom licenseJul 14, 2026 · metrics 2.5.0
Maven
camunda/zeebe-process-test
Testing project for Camunda Platform 8
Custom licenseJul 24, 2026 · metrics 2.5.0
crates.io
chanced/jsonptr
JSON Pointer (RFC 6901) implementation for Rust
Apache-2.0Jul 26, 2026 · metrics 2.5.0
—
cjheath/polyglot
Augment 'require' to load non-ruby file types
MITJul 22, 2026 · metrics 2.5.0
PyPI
clarisma/geodesk-py
Fast and storage-efficient spatial database engine for OpenStreetMap data
LGPL-3.0Jul 21, 2026 · metrics 2.5.0
Hex
cobenian/inet_cidr
CIDR library for Elixir that is compatible with Erlang's :inet and supports both IPv4 and IPv6
Apache-2.0Jul 17, 2026 · metrics 2.5.0
NuGet
curiosity-ai/tesserae
Components for building h5-based single-page-applications using C#
MITJul 17, 2026 · metrics 2.5.0
Go
databricks/databricks-sql-go
Golang database/sql driver for Databricks SQL.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
RubyGems
dcrec1/conventional-changelog-ruby
Ruby lib and executable to generate a conventional changelog
MITJul 20, 2026 · metrics 2.5.0
npm
deanc/esbuild-plugin-postcss
Plugin for esbuild to support SASS styles
No licenseJul 20, 2026 · metrics 2.5.0
npm
demigodmode/pi-web-agent
Reliable web tools for Pi: search for sources, fetch over HTTP, and use headless browsing only when explicitly requested.
AGPL-3.0Jul 23, 2026 · metrics 2.5.0
Go
distribution/reference
Go module implementing general types to represent any way of referencing images within distribution
Apache-2.0Jul 28, 2026 · metrics 2.5.0
Packagist
doerffler/flysystem-onedrive
A flysystem driver for OneDrive that uses the Microsoft Graph API
MITAug 5, 2026 · metrics 2.5.0
Packagist
dotmailer/dotmailer-magento2-extension
The official Dotdigital for Magento2 extension
MITJul 15, 2026 · metrics 2.5.0
crates.io
duesee/imap-codec
Rock-solid and complete codec for IMAP
Apache-2.0Jul 20, 2026 · metrics 2.5.0
—
esri/arcgis-runtime-toolkit-ios
Toolkit components that will simplify your iOS app development with ArcGIS Runtime
Apache-2.0Jul 18, 2026 · metrics 2.5.0
RubyGems
floraison/raabro
a Ruby PEG parser library
MITJul 20, 2026 · metrics 2.5.0
Go
formancehq/payments
payments repository
Custom licenseJul 17, 2026 · metrics 2.5.0
—
g-andrade/aequitas
Fairness regulator and rate limiter
MITJul 17, 2026 · metrics 2.5.0
RubyGems
googleapis/gapic-generator-ruby
Generate Ruby gRPC client libraries from Protocol Buffer definitions.
Apache-2.0Jul 31, 2026 · metrics 2.5.0
npm
hCaptcha/react-native-hcaptcha
hCaptcha React Native SDK
MITJul 27, 2026 · metrics 2.5.0
crates.io
helsing-ai/twurst
No repository description published.
Apache-2.0Jul 20, 2026 · metrics 2.5.0