Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,697
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
399B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
—
microsoft/security-utilities
Security utilities for key generation, string redaction, etc.
MITJul 18, 2026 · metrics 2.5.0
crates.io
mstange/pdb-addr2line
A Rust crate to symbolicate addresses from PDBs, like addr2line. Uses the `pdb` crate.
Apache-2.0Jul 24, 2026 · metrics 2.5.0
npm · Go
nacos-group/nacos-cli
nacos cli scripts
No licenseJul 18, 2026 · metrics 2.5.0
—
napari/napari-plugin-template
A template repo used to make new napari plugins
BSD-3-ClauseJul 14, 2026 · metrics 2.5.0
Hex
nerves-project/nerves_system_rpi
Base Nerves system configuration for the Raspberry Pi A+ and B+
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
node-oauth/express-oauth-server
🔒 Complete, compliant and well tested module for implementing an OAuth2 Server/Provider with express in node.js
MITJul 25, 2026 · metrics 2.5.0
PyPI
notypecheck/passlib
Passlib fork
Custom licenseJul 21, 2026 · metrics 2.5.0
npm
omni-media/omnitool
video processing tools
MITJul 20, 2026 · metrics 2.5.0
RubyGems
onc-healthit/onc-certification-g10-test-kit
ONC Certification (g)(10) Standardized API Tests
Apache-2.0Jul 27, 2026 · metrics 2.5.0
npm
onejs/on-zero
A thin layer over @rocicorp/zero for Rails-like, DRY models, queries, mutations, permissions
MITJul 14, 2026 · metrics 2.5.0
Go
openbao/openbao-plugins
A first-party collection of external plugins for OpenBao, including additional auth & secrets engines.
MPL-2.0Jul 21, 2026 · metrics 2.5.0
Go · PyPI
outscale-dev/terraform-provider-outscale
Terraform provider for managing OUTSCALE resources.
MPL-2.0Jul 19, 2026 · metrics 2.5.0
Go · PyPI
outscale/terraform-provider-outscale
Terraform provider for managing OUTSCALE resources.
MPL-2.0Jul 19, 2026 · metrics 2.5.0
npm
passbolt/passbolt_styleguide
Passbolt styleguide, repository of the UI elements and styles for the open source password manager for teams.
AGPL-3.0Aug 2, 2026 · metrics 2.5.0
RubyGems
pathawks/jekyll-commonmark
CommonMark generator for Jekyll
MITJul 18, 2026 · metrics 2.5.0
Packagist
paynl/sdk
Pay.nl SDK
MITJul 16, 2026 · metrics 2.5.0
Go
pfnet/image-pull-secrets-provisioner
No repository description published.
Apache-2.0Aug 5, 2026 · metrics 2.5.0
Packagist
pushery/email-magic-link-for-laravel
Passwordless email magic-link & OTP authentication for Laravel — standalone or with a correct, no-bypass Fortify 2FA handoff and scanner-safe link consumption.
MITAug 3, 2026 · metrics 2.5.0
PyPI
pytroll/donfig
Python library for configuring a package including defaults, env variable loading, and yaml loading.
MITJul 21, 2026 · metrics 2.5.0
RubyGems
rack/rack-cache
No repository description published.
Custom licenseJul 20, 2026 · metrics 2.5.0
npm
readmeio/markdown
ReadMe's flavored Markdown parser and React-based rendering engine.
ISCJul 14, 2026 · metrics 2.5.0
—
rjyo/homebrew-moshi
Homebrew tap for Moshi (moshi-hook)
No licenseJul 18, 2026 · metrics 2.5.0
RubyGems
ruby/net-protocol
The abstruct interface for net-* client.
Custom licenseJul 17, 2026 · metrics 2.5.0
RubyGems
ruby/xmlrpc
The Ruby standard library package 'xmlrpc'
Custom licenseJul 20, 2026 · metrics 2.5.0
npm
sasjs/cli
Command line interface for creating, compiling, and building SAS® projects
MITJul 29, 2026 · metrics 2.5.0
—
sbt/launcher
The sbt launcher as its own project. Can launch any ivy/maven published project with a main class, with some fancy features.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
scim2/filter-parser
SCIM v2 Query Filter Parser in Go
MITJul 22, 2026 · metrics 2.5.0
npm
scssyworks/silkrouter
Silk router is a reactive library for creating SPAs
MITAug 5, 2026 · metrics 2.5.0
crates.io
seanmonstar/try-lock
A lightweight lock protected by an atomic boolean.
MITAug 3, 2026 · metrics 2.5.0
npm
shaack/cm-pgn
Parse and create PGNs (Portable Game Notation for chess games)
MITAug 2, 2026 · metrics 2.5.0