Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,127
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io · npm
solana-foundation/pay
CLI for Agentic payments (x402, MPP, AP2).
MITSep 6, 2026 · metrics 2.10.0
crates.io
greyblake/nutype
Rust newtype with guarantees 🇺🇦 🦀
MITSep 6, 2026 · metrics 2.10.0
NuGet
MonoGame-Extended/Monogame-Extended
Extensions to make MonoGame more awesome
Custom licenseSep 4, 2026 · metrics 2.10.0
npm
standardagents/dmux
A dev agent multiplexer for git worktrees and coding agents.
MITSep 6, 2026 · metrics 2.10.0
—
Vysp3r/ProtonPlus
A modern compatibility tools manager
GPL-3.0Sep 6, 2026 · metrics 2.10.0
Go
envoyproxy/go-control-plane
Go implementation of data-plane-api
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Packagist
cypht-org/cypht
Cypht: Lightweight Open Source webmail aggregator [PHP, JS]. Supports IMAP/SMTP, JMAP and EWS (Exchange Web Services)
LGPL-2.1Sep 5, 2026 · metrics 2.10.0
PyPI
LadybugDB/ladybug
LadybugDB a graph database
MITSep 5, 2026 · metrics 2.10.0
Go · npm · PyPI
bruin-data/bruin
Build data pipelines with SQL and Python, ingest data from different sources, add quality checks, and build end-to-end flows.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
rust-osdev/bootloader
An experimental pure-Rust x86 bootloader
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
chainguard-dev/apko
Build OCI images from APK packages directly without Dockerfile
Apache-2.0Sep 5, 2026 · metrics 2.10.0
PyPI
opendatalab/labelU
Open-source multimodal data annotation platform with AI auto-annotation support.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
forwardemail/forwardemail.net
Privacy-focused encrypted email for everyone. All-in-one alternative to Gmail + Mailchimp + Sendgrid.
Custom licenseSep 6, 2026 · metrics 2.10.0
npm
node-opcua/node-opcua
Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/
MITSep 5, 2026 · metrics 2.10.0
crates.io · Go
dragonflyoss/nydus
Nydus - a reliable, high-performance on-demand load filesytem framework for container image and data distribution.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
crates.io
zama-ai/tfhe-rs
TFHE-rs: A Pure Rust implementation of the TFHE Scheme for Boolean and Integer Arithmetics Over Encrypted Data.
Custom licenseSep 5, 2026 · metrics 2.10.0
Maven
mekanism/Mekanism
A mod for Minecraft
MITSep 5, 2026 · metrics 2.10.0
—
NuGet/NuGetGallery
NuGet Gallery is a package repository that powers https://www.nuget.org. Use this repo for reporting NuGet.org issues.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Maven · npm
cloudfoundry/uaa
CloudFoundry User Account and Authentication (UAA) Server
Apache-2.0Aug 31, 2026 · metrics 2.10.0
Go
f/mcptools
A command-line interface for interacting with MCP (Model Context Protocol) servers using both stdio and HTTP transport.
MITSep 3, 2026 · metrics 2.10.0
npm
fiduswriter/simple-datatables
DataTables but in TypeScript transpiled to Vanilla JS
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist · PyPI
modelcontextprotocol/php-sdk
The official PHP SDK for Model Context Protocol servers and clients. Maintained in collaboration with The PHP Foundation.
Custom licenseSep 5, 2026 · metrics 2.10.0
crates.io
nacos-group/r-nacos
Nacos server re-implemented in Rust.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
—
feenkcom/gtoolkit
Glamorous Toolkit is the Moldable Development Environment. It empowers you to make systems explainable through contextual micro tools.
MITSep 5, 2026 · metrics 2.10.0
—
kristoff-it/zine
Fast, Scalable, Flexible Static Site Generator (SSG)
MITSep 3, 2026 · metrics 2.10.0
Go
terraform-google-modules/terraform-example-foundation
Shows how the CFT modules can be composed to build a secure cloud foundation
Apache-2.0Aug 31, 2026 · metrics 2.10.0
npm
nuxt/image
Plug-and-play image optimization for Nuxt applications.
MITSep 6, 2026 · metrics 2.10.0
npm
jaydenseric/apollo-upload-client
A terminating Apollo Link for Apollo Client that fetches a GraphQL multipart request if the GraphQL variables contain files (by default FileList, File, or Blob instances), or else fetches a regular GraphQL POST or GET request (depending on the config and GraphQL operation).
No licenseSep 1, 2026 · metrics 2.10.0
npm
langchain-ai/deepagentsjs
The batteries included agent harness.
MITSep 5, 2026 · metrics 2.10.0
npm
adobe/spectrum-web-components
Spectrum Web Components
Apache-2.0Sep 5, 2026 · metrics 2.10.0