Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
51,968
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
389B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist
afterpay/afterpay-magento-2
Official Afterpay Extension for Magento 2
Apache-2.0Jul 21, 2026 · metrics 2.5.0
npm
ai-ecoverse/slicc
A browser-native AI agent (claw) for everyone that loves ice cream
Apache-2.0Jul 14, 2026 · metrics 2.5.0
crates.io
al8n/agnostic
Agnostic is a Rust ecosystem that provides runtime-agnostic abstractions for async operations. Write your async code once and run it seamlessly with tokio, smol, or even in WebAssembly - without code changes.
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Go
alex60217101990/qdf
Quick Data Format — fast, compact binary serialization for Go. encoding/json-style API, columnar per-column codecs, up to 68% smaller than Protobuf.
MITJul 23, 2026 · metrics 2.5.0
npm
alexindigo/asynckit
Minimal async jobs utility library, with streams support
MITAug 4, 2026 · metrics 2.5.0
—
algolia/algoliasearch-client-scala
⚡️ A fully-featured and blazing-fast Scala API client to interact with Algolia.
MITJul 19, 2026 · metrics 2.5.0
npm
andsmedeiros/hw-fingerprint
Hardware-based fingerprinting for Node and Electron
MITJul 21, 2026 · metrics 2.5.0
npm
anvia-hq/anvia
Anvia is a TypeScript runtime for building provider-agnostic agents, tool workflows, and structured extraction inside your application code.
MITJul 14, 2026 · metrics 2.5.0
—
arduino-libraries/bno055
No repository description published.
GPL-3.0Jul 17, 2026 · metrics 2.5.0
npm · RubyGems
artsy/palette-mobile
Artsy's Design System on Mobile
No licenseJul 29, 2026 · metrics 2.5.0
crates.io
asimov-platform/asimov-cli
🛠️ ASIMOV Command-Line Interface (CLI).
UnlicenseJul 31, 2026 · metrics 2.5.0
RubyGems
azimux/externals
provides a svn:externals like workflow in an scm agnostic manner
Custom licenseJul 23, 2026 · metrics 2.5.0
—
bazel-contrib/rules_shell
No repository description published.
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Maven
bcgit/bc-lts-java
Bouncy Castle Java Long Term Stable (LTS) Code
No licenseJul 25, 2026 · metrics 2.5.0
Packagist
beste/in-memory-cache-php
A PSR-6 In-Memory cache that can be used as a fallback implementation and/or in tests.
MITJul 20, 2026 · metrics 2.5.0
Hex
bluzky/valdi
Simple data validation for elixir
No licenseJul 17, 2026 · metrics 2.5.0
Hex
bmuller/telemetry_metrics_cloudwatch
Provides an AWS CloudFront reporter for Elixir Telemetry.Metrics definitions
MITJul 17, 2026 · metrics 2.5.0
RubyGems
bpardee/persistent_http
Persistent http connections using a connection pool
MITJul 22, 2026 · metrics 2.5.0
npm
braintrustdata/braintrust-sdk-javascript
JavaScript Tracing & Evals library for Braintrust
Apache-2.0Jul 15, 2026 · metrics 2.5.0
crates.io
cavivie/netstack-smoltcp
A netstack based on smoltcp-rs.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
npm
chaijs/assertion-error
Error constructor for test and validation frameworks that implements standardized AssertionError specification.
MITAug 4, 2026 · metrics 2.5.0
NuGet
chargebee/chargebee-dotnet
.NET library for the Chargebee API.
MITJul 21, 2026 · metrics 2.5.0
npm
chartmogul/chartmogul-node
ChartMogul API Node.js Client
MITJul 30, 2026 · metrics 2.5.0
Go
cheatmd-dev/cheatmd
Executable Markdown cheatsheets. Write plain .md files that read like normal notes, then run them as interactive commands with variable prompts, pickers, and shell integration for bash/zsh/tmux/zellij.
MITJul 17, 2026 · metrics 2.5.0
RubyGems
chef/dep-selector
Fast Dependency Solver for Ruby using Gecode
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Go
ckoliber/gocrud
Golang CRUD API Generator
MITJul 17, 2026 · metrics 2.5.0
—
clastix/kamaji-etcd
Multi-tenant etcd datastore for Kamaji
Apache-2.0Jul 19, 2026 · metrics 2.5.0
npm
cloud-copilot/iam-convert
Convert JSON IAM Policies to other formats
AGPL-3.0Jul 13, 2026 · metrics 2.5.0
Packagist
cmgmyr/phploc
A tool for quickly measuring the size of a PHP project.
BSD-3-ClauseAug 4, 2026 · metrics 2.5.0
crates.io · npm
codama-idl/codama-rs
[WIP] Codama nodes and IDL extraction in Rust
No licenseJul 14, 2026 · metrics 2.5.0