Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,338
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
399B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
crates.io
TannerRogalsky/tokio-tungstenite-wasm
A wrapper around websys and tokio-tungstenite that makes it easy to use websockets cross-platform.
MITAug 5, 2026 · metrics 2.5.0
npm
Tradeshift/tradeshift-ui
The Tradeshift UI Library & Framework
Custom licenseJul 21, 2026 · metrics 2.5.0
PyPI
Xilinx/finn-base
Open Source Compiler Framework using ONNX as Frontend and IR
BSD-3-ClauseJul 21, 2026 · metrics 2.5.0
npm · crates.io
aeoess/agent-passport-system
Open protocol for AI agent accountability. Cryptographic identity, delegation that can only narrow, gateway enforcement, signed receipts for every action. TypeScript reference, Apache-2.0.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
agigante80/actual-mcp-server
Talk to your self-hosted Actual Budget from any MCP client: a remote HTTP server for LibreChat/LobeChat or a local stdio process for Claude Desktop, with 71 tools for transactions, budgets, rules, and bank sync. No Docker needed for local use.
MITJul 17, 2026 · metrics 2.5.0
npm
alfa-laboratory/alfa-ui-primitives
Alfa-Bank UI primitives for sharing between platforms
No licenseJul 20, 2026 · metrics 2.5.0
npm · crates.io
almogdepaz/wolfpack
Self-hosted browser terminal manager for AI coding agents. Control Claude Code, Codex, Gemini, and shell sessions from your phone or browser over Tailscale.
MITJul 17, 2026 · metrics 2.5.0
Go
amikai/openings-mcp
💼 One MCP server to search job boards and company career sites
MITJul 16, 2026 · metrics 2.5.0
Go
anyproto/any-sync-coordinator
Implementation of coordinator node from any-sync protocol
MITJul 17, 2026 · metrics 2.5.0
RubyGems
apotonick/declarative
DSL for nested schemas.
MITJul 18, 2026 · metrics 2.5.0
npm
arraypress/waveform-player
Lightweight, customizable audio player with waveform visualization
MITJul 30, 2026 · metrics 2.5.0
Hex
ash-project/splode
Aggregatable and consistent errors for Elixir
No licenseJul 17, 2026 · metrics 2.5.0
crates.io
asimov-platform/asimov.rs
🦀 ASIMOV Software Development Kit (SDK) for Rust: A polyglot development platform for trustworthy neurosymbolic machine intelligence.
UnlicenseJul 29, 2026 · metrics 2.5.0
Hex
ayrat555/ton
TON (The Open Network) SDK
MITJul 18, 2026 · metrics 2.5.0
npm
azure-sdk/azure-sdk-for-net
This repository is intended for active development of the Azure SDK for .NET. For consumers of the SDK we recommend visiting our public developer docs at https://docs.microsoft.com/en-us/dotnet/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-net.
MITJul 13, 2026 · metrics 2.5.0
Hex
benjreinhart/server_sent_events
Lightweight, ultra-fast, fully spec-conformant Server Sent Event parser
MITJul 17, 2026 · metrics 2.5.0
npm
birdofpreyru/babel-plugin-react-css-modules
Transforms styleName to className using compile time CSS module resolution.
Custom licenseAug 5, 2026 · metrics 2.5.0
Hex
bitwalker/picosat_elixir
Elixir + Erlang bindings for the PicoSAT solver
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Go
blues/note
Blues Wireless Notehub & Notelib Core
AGPL-3.0Jul 21, 2026 · metrics 2.5.0
npm
calvinmetcalf/process-nextick-args
process.nextTick always accepts args, always
MITAug 4, 2026 · metrics 2.5.0
npm
camunda/camunda-8-js-sdk
The Camunda 8 JavaScript SDK for Node.js
Apache-2.0Jul 19, 2026 · metrics 2.5.0
crates.io
chikaku/gosyn
Golang syntax parser in Rust
MITJul 17, 2026 · metrics 2.5.0
npm
chili-publish/studio-sdk
An open source SDK for making advanced integrations with GraFx Studio
MITJul 16, 2026 · metrics 2.5.0
crates.io · npm
christiandoxa/prodex
Prodex is a multi-account, multi-provider Codex wrapper with auto-rotation, Super mode, Smart Context, and token saving for Codex CLI and Claude Code
Apache-2.0Jul 13, 2026 · metrics 2.5.0
npm
ckeditor/ckeditor5-inspector
CKEditor 5 inspector.
Custom licenseJul 16, 2026 · metrics 2.5.0
Maven
cloudfoundry/java-test-applications
Applications used for testing the Java buildpack
Apache-2.0Jul 27, 2026 · metrics 2.5.0
npm
continuous-foundation/tex-to-typst
Translate LaTeX or TeX math markup to typst
MITJul 22, 2026 · metrics 2.5.0
npm
datalust/seq-logging
A Node.js client for the Seq HTTP ingestion API
Apache-2.0Jul 17, 2026 · metrics 2.5.0
crates.io · PyPI
dbt-labs/dbt-extractor
No repository description published.
Apache-2.0Jul 30, 2026 · metrics 2.5.0
crates.io
de-vri-es/serial2-tokio-rs
No repository description published.
Custom licenseAug 1, 2026 · metrics 2.5.0