Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,148
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
deadbone/homebridge-calendar-state
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
Go
dean-jl/spf-flattener
A CLI tool to automatically flatten SPF DNS records for domains using DNS providers such as Porkbun (with extensibility for others). This tool helps manage complex SPF records by resolving `include`, `a`, and `mx` mechanisms into IP addresses, ensuring your domain's SPF record adheres to DNS lookup limits and character limits.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
decentraland/ui2
:rainbow: Decentraland UI2
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
deckhouse/delivery-kit-sdk
No repository description published.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
decort-tech/govulncheck-ignore
A govulncheck wrapper with explicit, reviewable vulnerability ignores
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
deelperp/deelp-pkg
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
Go
deep-project/aikit
🪼 AI Kit AI工具包
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
deepaucksharma/trace-aware-reservoir-otel
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
Go
deeper-x/sqlmem
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
npm
dejang/bonsai
A minimal isomorphic data store for React and NextJS
MITSep 21, 2026 · metrics 2.10.0
Go
dekwanlabs/Nasuta
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
Go
dellinger2023/net-flux
multimedia streaming base library
MITSep 19, 2026 · metrics 2.10.0
Go
delmarcode/reeltube-cli
reeltube cli
No licenseSep 19, 2026 · metrics 2.10.0
Go
denglertai/gonfig
No repository description published.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
deni12345/shopeefood-go-apis
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
NuGet
denis-peshkov/Cross.CQRS.EF
EF Core transactional behaviors for MediatR/Cross.CQRS — DI config, isolation levels, per-handler ExactTransaction. Published on Nuget at https://www.nuget.org/packages/Cross.CQRS.EF
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
dennisofficial/site-map
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
crates.io
denoland/libuv-sys-lite
Tiny rust bindings to libuv, letting you decide how to link to it
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
deploymenttheory/go-sdk-thousandeyes
Spec-driven Go SDK for the ThousandEyes API v7. Full v7 surface with typed models, bearer-token auth, rate-limit-aware throttling, retries and automatic pagination.
MITSep 19, 2026 · metrics 2.10.0
Go
deploymenttheory/go-sdk-vtpm2
A pure Go software TPM 2.0 (vTPM) implementation. Including features such as measured boot, BitLocker sealing & attestation for Windows 11 guests under QEMU, built from the TCG spec.
MITSep 19, 2026 · metrics 2.10.0
Go
deploymenttheory/go-sdk-winmediafoundry
A pure Go, cross-platform toolkit for acquiring and building Windows installation media, without external tools (no wimlib, DISM, oscdimg, or cabextract). It provides an SDK plus a CLI.
MITSep 18, 2026 · metrics 2.10.0
Go
derLumu/gograph
A golang generic graph library that provides mathematical graph-theory and algorithms.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
derangga/phunter
A TUI for hunt and kill a port that running on your devices
MITSep 15, 2026 · metrics 2.10.0
—
derekbassett/sarama-cluster
Cluster extensions for Sarama, the Go client library for Apache Kafka 0.9
MITSep 19, 2026 · metrics 2.10.0
Go
derektamsen/gcp-redis-ca-fetch
Fetches GCP Redis CA certificates
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
derektamsen/hancock
AWS S3 URL Presigner in golang
No licenseSep 19, 2026 · metrics 2.10.0
Go
desain-gratis/deployd
deploy golang service as ubuntu systemd service
MITSep 19, 2026 · metrics 2.10.0
npm · PyPI
desenyon/ephemeral
Ephemeral is a keyboard-first research environment for market analysis, thesis development, and local-or-cloud LLM workflows.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
desk-ly/mercure-transport-redis
A Redis transport for the Mercure hub, packaged as a Caddy module.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
determinare/schema
No repository description published.
MITSep 18, 2026 · metrics 2.10.0