Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,744
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
399B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
jsdom/webidl-conversions
Implements the Web IDL algorithms for converting to and from JavaScript values
BSD-2-ClauseAug 4, 2026 · metrics 2.5.0
RubyGems
jsonapi-rb/jsonapi-renderer
Efficiently render JSON API documents.
MITJul 28, 2026 · metrics 2.5.0
Hex
kafkaex/kayrock
Elixir-idiomatic Kafka protocol serialization and deserialization
MITJul 17, 2026 · metrics 2.5.0
Packagist
laminas/laminas-config-aggregator
Lightweight library for collecting and merging configuration from different sources
BSD-3-ClauseJul 24, 2026 · metrics 2.5.0
—
lpil/argv
➿ A cross platform library for getting the command line arguments.
No licenseJul 17, 2026 · metrics 2.5.0
Maven
metalama/Metalama.Compiler
A fork of Roslyn that adds an extension point that allows for arbitrary code modifications.
MITJul 21, 2026 · metrics 2.5.0
Packagist
michaelpetri/typed-input
Type safe input wrapper for symfony input
MITJul 17, 2026 · metrics 2.5.0
Packagist
minkphp/MinkZombieDriver
Zombie.js driver for Mink framework
No licenseAug 3, 2026 · metrics 2.5.0
—
mirage/ezjsonm
An easy interface on top of the Jsonm library.
Custom licenseJul 20, 2026 · metrics 2.5.0
npm
modelzen/feishu-codex-bridge
把 codex/claude 接入飞书
MITJul 23, 2026 · metrics 2.5.0
npm
namehash/ensnode
ENSNode is the full-stack ENSv2 development platform.
MITJul 14, 2026 · metrics 2.5.0
Hex
nerves-networking/mdns_lite
A simple, no frills mDNS implementation in Elixir
Custom licenseJul 17, 2026 · metrics 2.5.0
Packagist
nette/coding-standard
Nette Coding Standard code checker & fixer
MITJul 13, 2026 · metrics 2.5.0
npm
nodejs/doc-kit
Node.js's tooling for API generation
MITJul 17, 2026 · metrics 2.5.0
Hex
ollien/twine
Trace calls in Elixir processes
BSD-3-ClauseJul 17, 2026 · metrics 2.5.0
Go · Maven
opentffoundation/terraform-provider-aws
Terraform AWS provider
MPL-2.0Jul 17, 2026 · metrics 2.5.0
Go
pb33f/doctor
The Doctor. Just the doctor, no more, no less. The OpenAPI all in one supercharged go toolkit
Apache-2.0Jul 13, 2026 · metrics 2.5.0
—
polarismesh/polaris-cpp
Lightweight C++ SDK used as Proxyless Service Governance
Custom licenseJul 15, 2026 · metrics 2.5.0
—
purescript-deprecated/purescript-generics-rep
Generic programming using an approach inspired by GHC.Generics
No licenseJul 20, 2026 · metrics 2.5.0
npm
respanai/respan
No repository description published.
Apache-2.0Jul 19, 2026 · metrics 2.5.0
PyPI
rmax/databrewer
The missing datasets manager. Like hombrew but for datasets. CLI-tool for search and discover datasets!
MITJul 27, 2026 · metrics 2.5.0
npm · crates.io
rstackjs/rspack-resolver
Rust Port of enhanced-resolve
MITJul 14, 2026 · metrics 2.5.0
crates.io · PyPI
rustic-ai/uni-db
Uni is a modern, embedded database that combines property graph (OpenCypher), vector search, and columnar storage (Lance) into a single, cohesive engine. It is designed for applications requiring local, fast, and multimodal data access, backed by object storage (S3/GCS) durability.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm · crates.io
rxing-core/rxing-wasm
WASM bindings for common rxing functions
Apache-2.0Aug 1, 2026 · metrics 2.5.0
npm
sasjs/adapter
An adapter for bidirectional SAS® <-> Javascript communication
MITJul 30, 2026 · metrics 2.5.0
Packagist
scrutinizer-ci/ocular
CLI for uploading external code coverage data
No licenseAug 4, 2026 · metrics 2.5.0
—
serilog/serilog-sinks-debug
Writes Serilog events to the debug output window (in `DEBUG` builds only)
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Maven
shopgun/zoomlayout
ZoomLayout is a ViewGroup, that enables pinch-zoom and panning on child-views.
No licenseJul 19, 2026 · metrics 2.5.0
—
siderolabs/sbc-raspberrypi
Raspberry Pi Imager Overlay
MPL-2.0Jul 26, 2026 · metrics 2.5.0
npm
sindresorhus/restore-cursor
Gracefully restore the CLI cursor on exit
MITAug 4, 2026 · metrics 2.5.0