Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
53,027
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
400B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
sdsrss/claude-mem-lite
Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. Alternative to claude-mem with 600x lower cost.
MITAug 3, 2026 · metrics 2.5.0
npm
sindresorhus/is-binary-path
Check if a file path is a binary file
MITAug 4, 2026 · metrics 2.5.0
Go · npm
sjzsdu/tongstock
基于 Go 语言的 TDX (通达信) 行情数据客户端，支持 CLI 和 HTTP API 两种方式获取A股实时行情、K线、分时及分笔成交数据
No licenseJul 21, 2026 · metrics 2.5.0
npm
smartpricing/queen
C++ Partitioned Message Queue backed by PostgreSQL, with Go, Node, Python, PHP, C++, plain HTTP clients. Support consumer group, replay, transactional pop+ack, failover to disk
Apache-2.0Jul 18, 2026 · metrics 2.5.0
npm · Go
snyk/dep-graph
Represents a dependency graph
Custom licenseAug 3, 2026 · metrics 2.5.0
—
spider-gazelle/bindata
BinData - Parsing Binary Data in Crystal Lang
MITJul 21, 2026 · metrics 2.5.0
NuGet · npm
stavroskasidis/BlazorDialog
Easy dialog management for Blazor !
MITJul 27, 2026 · metrics 2.5.0
NuGet
supabase-community/gotrue-csharp
C# implementation of Supabase's GoTrue
MITJul 22, 2026 · metrics 2.5.0
npm
sveltejs/acorn-typescript
Acorn plugin that parses TypeScript
MITJul 20, 2026 · metrics 2.5.0
npm
tekpriest/paystack-node
Paystack SDK written in Typescript
MITJul 31, 2026 · metrics 2.5.0
Packagist
teqneers/shamir
Shamir's Shared Secret Implementation in PHP
MITJul 26, 2026 · metrics 2.5.0
PyPI
unohee/kis-agent
한국투자증권 OpenAPI Python 래퍼 — CLI · Python SDK · LLM Agent · 실시간 WebSocket. 문서: unohee.github.io/kis-agent
No licenseJul 21, 2026 · metrics 2.5.0
—
urbanjost/general-purpose-fortran
General Purpose Fortran Cooperative
Custom licenseJul 18, 2026 · metrics 2.5.0
RubyGems
vale-cli/write-good
A Vale-compatible implementation of the write-good linter.
MITJul 20, 2026 · metrics 2.5.0
crates.io · npm
velocity-exchange/drift-vaults
a vault program on top of protocol-v2 for delegate-managed trades with customizable terms
Apache-2.0Jul 19, 2026 · metrics 2.5.0
Hex
vereis/ecto_hooks
Ecto library that re-implements Ecto.Model callbacks
MITJul 17, 2026 · metrics 2.5.0
PyPI
vita-epfl/trajnetplusplustools
Tools for TrajNet++
MITJul 16, 2026 · metrics 2.5.0
Packagist
wintercms/storm
The library powering Winter CMS
MITJul 14, 2026 · metrics 2.5.0
Packagist
woocommerce/woocommerce-sniffs
Collection of PHP_CodeSniffer sniffs for WooCommerce
MITJul 29, 2026 · metrics 2.5.0
Packagist
worksome/coding-style
Worksomes coding style
MITAug 4, 2026 · metrics 2.5.0
npm
wraps-team/wraps
AWS Email, SMS, & CDN, simple.
Custom licenseJul 14, 2026 · metrics 2.5.0
Maven
wso2/transport-http
No repository description published.
Apache-2.0Jul 25, 2026 · metrics 2.5.0
Go · PyPI
xuri/excelize-py
Excelize is a Python port of Go Excelize library that allow you to write to and read from XLAM / XLSM / XLSX / XLTM / XLTX files.
BSD-3-ClauseAug 1, 2026 · metrics 2.5.0
Packagist
yiisoft/friendly-exception
An interface for an exception to be friendly
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
Packagist
yiisoft/strings
String helper methods and an inflector
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
Packagist
yiisoft/yii2-symfonymailer
Yii 2 Symfony mailer extension.
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
—
yzdnn/ChangBanDianSong-12
基于KHドット道玄坂12衍生的中文像素字体 / A Chinese pixel font derived from KH Dot Dougenzaka 12.
OFL-1.1Jul 24, 2026 · metrics 2.5.0
Packagist
zbateson/mb-wrapper
PHP wrapper for mbstring with fallback to iconv for encoding conversion and string manipulation
BSD-2-ClauseJul 28, 2026 · metrics 2.5.0
Go
1set/starlet
✨ Yet another Go wrapper for Starlark that simplifies usage, offers data conversion and useful Starlark libraries
MITJul 15, 2026 · metrics 2.5.0
npm
Growthub-ai/growthub-local
Create a governed Workspace from any source; repo, skill, kit, or existing product — customize it visually, keep it current, & rapidly deploy.
No licenseJul 29, 2026 · metrics 2.5.0