Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,080
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
justtrackio/gosoline
Gosoline is our framework which fuels all of our Golang applications
MITSep 20, 2026 · metrics 2.10.0
npm
sindresorhus/sort-keys
Sort the keys of an object
MITSep 23, 2026 · metrics 2.10.0
—
xxsds/sdsl-lite
Succinct Data Structure Library 3.0
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
SocketCluster/socketcluster-server
Minimal server module for SocketCluster
MITSep 20, 2026 · metrics 2.10.0
Go
atomicgo/keyboard
⌨️ Read keyboard events in your terminal applications! (Arrow keys, Home, End, etc.)
MITSep 23, 2026 · metrics 2.10.0
Go
cli/safeexec
A safer version of exec.LookPath on Windows
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
npm · crates.io
tsirysndr/tunein-cli
Browse and listen to thousands of radio stations across the globe right from your terminal 🌎 📻 🎵✨
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
aditbajaj/fibrumpdf
Structured PDF extraction at 318 pages/second on CPU
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
ca-gip/kotary
Managing Kubernetes Quota with confidence
MITSep 19, 2026 · metrics 2.10.0
—
mingsongli/acycle
Acycle: Time-series analysis software for research and education
No licenseSep 20, 2026 · metrics 2.10.0
crates.io
multikernel/branchfs
BranchFS is a FUSE-based filesystem that provides lightweight, atomic speculative branching on top of any existing filesystem.
MITSep 20, 2026 · metrics 2.10.0
npm
sindresorhus/throttleit
Throttle a function to limit its execution rate
MITSep 23, 2026 · metrics 2.10.0
NuGet · npm
zompinc/efcore-extensions
Provides window (analytics) functions and binary functions for EF Core. Providers: SQL Server, SQLite, Postgres.
MITSep 21, 2026 · metrics 2.10.0
PyPI
dbt-labs/dbt-redshift
This repository has moved into https://github.com/dbt-labs/dbt-adapters
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
Venafi/vcert
Go client SDK and command line utility designed to simplify integrations by automating key generation and certificate enrollment using Venafi machine identity services.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
emersion/go-sasl
🔑 A SASL library written in Go
MITSep 23, 2026 · metrics 2.10.0
Go
mockzilla/mockzilla
Open-source OpenAPI mock server with cloud hosting and local modes for development, testing, and CI. Generates realistic API responses from specs with latency simulation, error injection, proxy fallback, and request validation. Validated against 2,200+ real-world OpenAPI specs.
MITSep 19, 2026 · metrics 2.10.0
Go · npm
moeru-ai/unspeech
🗣️🔊 Your Text-to-Speech Services, All-in-One.
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
n132/ARVO
ARVO: an Atlas of Reproducible Vulnerabilities in Open source software.
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
—
some-natalie/kubernoodles
k8s runners for GitHub Actions in the enterprise, made for humans
MITSep 20, 2026 · metrics 2.10.0
NuGet
tomasfabian/ksqlDB.RestApi.Client-DotNet
ksqlDb.RestApi.Client is a C# LINQ-enabled client API for issuing and consuming ksqlDB push and pull queries and executing statements.
MITSep 21, 2026 · metrics 2.10.0
Go
turnerlabs/fargate-create
A CLI tool for scaffolding out new AWS ECS/Fargate applications based on Terraform templates and Fargate CLI
MITSep 19, 2026 · metrics 2.10.0
crates.io
virtee/snpguest
A CLI tool for interacting with SEV-SNP guest environment
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
zoharbabin/due-diligence-agents
Legal flags a risk. Finance flags another. We connect and cite. Open-source forensic M&A due diligence: 13 AI agents read your data room across 9 domains (Legal, Finance, Commercial, Tech, Cyber, HR, Tax, Regulatory, ESG), cross-reference findings no single reviewer connects, and trace every one to an exact page & quote.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
hashicorp/terraform-provider-boundary
Manage Boundary's identity-based access controls for resources provisioned with Terraform. This provider is maintained internally by the HashiCorp Boundary team.
MPL-2.0Sep 20, 2026 · metrics 2.10.0
Go
joeig/go-powerdns
PowerDNS API client for Go (community project)
MITSep 20, 2026 · metrics 2.10.0
npm
kenn/react-router-auto-routes
Automatic folder-based routing with colocation for React Router v7+
MITSep 24, 2026 · metrics 2.10.0
npm
scalus3/scalus
Scalus - Smart contracts & dApps Development Platform for Cardano
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
sindresorhus/filter-obj
Filter object keys and values into a new object
MITSep 23, 2026 · metrics 2.10.0
NuGet
abrudtkuhl/WordPressSharp
A C# client to to interact with the WordPress XML-RPC API
GPL-3.0Sep 25, 2026 · metrics 2.10.0