Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,461
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
399B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
—
yanagiba/swift-lint
A static source code analysis tool to improve quality and reduce defects for Swift.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
Packagist
yiisoft/factory
Object factory that is able to resolve dependencies from PSR-11 container
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
Go
yitter/IdGenerator-Go
idgenerator 的 Go 专项引用库。
MITJul 15, 2026 · metrics 2.5.0
crates.io
zfedoran/brine-ed25519
Ed25519 signature verification for Solana programs
MITJul 31, 2026 · metrics 2.5.0
Go
Andriiklymiuk/corgi
Run your whole local stack from one file — repos, databases, env, every service. Let AI agents plan, build, and review work across it. Then run the same stack in CI, so your e2e finally tests all the repos together.
MITAug 3, 2026 · metrics 2.5.0
npm
ArcadeAI/arcade-js
Arcade AI NodeJS Client
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Go
BaizeAI/kcover
🧯 Kubernetes coverage for fault awareness and recovery, works for any LLMOps, MLOps, AI workloads.
Apache-2.0Jul 21, 2026 · metrics 2.5.0
npm · Packagist · PyPI
DigitalArsenal/spacedatastandards.org
Data Standards For Space Data Systems
No licenseJul 17, 2026 · metrics 2.5.0
—
EcoJulia/Diversity.jl
Julia package for diversity measurement
BSD-2-ClauseJul 28, 2026 · metrics 2.5.0
—
FigBug/RP2A03
RP2A03 vst synth
LGPL-2.1Aug 2, 2026 · metrics 2.5.0
Go · npm
FuturFusion/migration-manager
FuturFusion Cloud Migration Manager
Apache-2.0Jul 22, 2026 · metrics 2.5.0
Go
IBM-Cloud/ibm-cloud-cli-sdk
No repository description published.
Apache-2.0Jul 23, 2026 · metrics 2.5.0
—
JuliaData/DataAPI.jl
A data-focused namespace for packages to share functions
Custom licenseJul 21, 2026 · metrics 2.5.0
npm
KarmaloopAI/Jiva
Jiva is a CLI-first, open source autonomous AI agent and open alternative to Claude. Written in TypeScript with native support for Sarvam-105B and gpt-oss-120b, it autonomously plans and executes tasks from your terminal. Supports MCP servers, a built-in Skills system, and Jiva Personas - a plugin framework fully compatible with Claude Plugins.
MITJul 27, 2026 · metrics 2.5.0
PyPI
Kozea/cssselect2
CSS selectors for Python ElementTree
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
NuGet
Lombiq/.NET-Analyzers
.NET code analyzers and code convention settings for Lombiq projects.
BSD-3-ClauseJul 18, 2026 · metrics 2.5.0
npm
MetaMask/metamask-design-system
The design system for MetaMask products
No licenseJul 21, 2026 · metrics 2.5.0
crates.io
NVIDIA/nvrc
The NVRC project provides a Rust binary that implements a simple init system for microVMs.
Apache-2.0Jul 26, 2026 · metrics 2.5.0
Go
NillionNetwork/nilchain
Coordination layer for the Nillion Network
No licenseJul 26, 2026 · metrics 2.5.0
Packagist
OneSignal/onesignal-php-api
The official OneSignal API client for PHP
Custom licenseJul 17, 2026 · metrics 2.5.0
crates.io
OpenCoven/coven
Local runtime harness substrate for project-scoped agent sessions.
MITJul 16, 2026 · metrics 2.5.0
npm
OysteinAmundsen/toolbox
A no-dependency component library for the web
MITJul 14, 2026 · metrics 2.5.0
PyPI
PFund-Software-Ltd/pfeed
Data Engine for AI/Algo Trading: Download/Stream -> Clean -> Store. Supports Data Lakehouse Architecture. Clean Once and Forget.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Packagist
QodeNL/Laravel-Posthog
Laravel Posthog implementation
No licenseJul 25, 2026 · metrics 2.5.0
PyPI
Quantinuum/pytket-quantinuum
pytket-quantinuum, extensions for pytket quantum SDK
Apache-2.0Aug 5, 2026 · metrics 2.5.0
Go
SproutPanel/roots
Roots is a game server daemon that manages Docker containers for game servers.
No licenseJul 23, 2026 · metrics 2.5.0
Go
Swatto/promtotwilio
Send text messages for Prometheus alerts using Twilio
MITJul 26, 2026 · metrics 2.5.0
Go · npm
aarondpn/redmine-cli
A powerful command-line interface for Redmine, enhanced with first-class AI agent capabilities via Skills and MCP integration.
MITAug 2, 2026 · metrics 2.5.0
Go
aldernero/countdown
A terminal based multi-event countdown timer
MITJul 26, 2026 · metrics 2.5.0
npm
algolia/algolia-sitemap
a node library allowing you to generate sitemaps from an Algolia index.
MITJul 19, 2026 · metrics 2.5.0