Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,954
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
zirkelc/ai-retry
Retries and fallbacks for the AI SDK
MITSep 19, 2026 · metrics 2.10.0
npm
SocketCluster/socketcluster-server
Minimal server module for SocketCluster
MITSep 20, 2026 · metrics 2.10.0
Go
atomicgo/keyboard
⌨️ Read keyboard events in your terminal applications! (Arrow keys, Home, End, etc.)
MITSep 23, 2026 · metrics 2.10.0
Maven
ballerina-platform/module-ballerinax-azure.functions
The implementation of Azure Functions compiler extension for Ballerina.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
cli/safeexec
A safer version of exec.LookPath on Windows
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
npm · crates.io
tsirysndr/tunein-cli
Browse and listen to thousands of radio stations across the globe right from your terminal 🌎 📻 🎵✨
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
aditbajaj/fibrumpdf
Structured PDF extraction at 318 pages/second on CPU
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
ca-gip/kotary
Managing Kubernetes Quota with confidence
MITSep 19, 2026 · metrics 2.10.0
—
mingsongli/acycle
Acycle: Time-series analysis software for research and education
No licenseSep 20, 2026 · metrics 2.10.0
crates.io
multikernel/branchfs
BranchFS is a FUSE-based filesystem that provides lightweight, atomic speculative branching on top of any existing filesystem.
MITSep 20, 2026 · metrics 2.10.0
npm
oluiscabral/studorama
AI-powered study sessions to enhance your learning
MITSep 19, 2026 · metrics 2.10.0
npm
sindresorhus/throttleit
Throttle a function to limit its execution rate
MITSep 23, 2026 · metrics 2.10.0
NuGet · npm
zompinc/efcore-extensions
Provides window (analytics) functions and binary functions for EF Core. Providers: SQL Server, SQLite, Postgres.
MITSep 21, 2026 · metrics 2.10.0
Go
Trendyol/go-dcp
The Go implementation of the Couchbase DCP with various features
MITSep 19, 2026 · metrics 2.10.0
—
bytesc/Django_Management_System_template
✨ 基于 Django 和 Mysql 的信息管理系统模板 ✨。后台管理系统，OA ，表单系统，管理员系统，数据库管理系统模板，数据库访问模板。前端后端不分离，Web 应用增删改查数据库。详细注释，高度封装，易复用。
MITSep 19, 2026 · metrics 2.10.0
PyPI
dbt-labs/dbt-redshift
This repository has moved into https://github.com/dbt-labs/dbt-adapters
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm · PyPI
linhut/document-ai-assistant
AI 公文智能优化助手 — 基于 GB/T 9704 标准的公文格式智能检测与优化桌面应用，可本地离线部署
MITSep 19, 2026 · metrics 2.10.0
Go
Venafi/vcert
Go client SDK and command line utility designed to simplify integrations by automating key generation and certificate enrollment using Venafi machine identity services.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
emersion/go-sasl
🔑 A SASL library written in Go
MITSep 23, 2026 · metrics 2.10.0
PyPI
fcakyon/midv500
Download and convert MIDV-500 annotations to COCO instance segmentation format
MITSep 19, 2026 · metrics 2.10.0
Go
mockzilla/mockzilla
Open-source OpenAPI mock server with cloud hosting and local modes for development, testing, and CI. Generates realistic API responses from specs with latency simulation, error injection, proxy fallback, and request validation. Validated against 2,200+ real-world OpenAPI specs.
MITSep 19, 2026 · metrics 2.10.0
Go · npm
moeru-ai/unspeech
🗣️🔊 Your Text-to-Speech Services, All-in-One.
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
n132/ARVO
ARVO: an Atlas of Reproducible Vulnerabilities in Open source software.
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
—
some-natalie/kubernoodles
k8s runners for GitHub Actions in the enterprise, made for humans
MITSep 20, 2026 · metrics 2.10.0
NuGet
tomasfabian/ksqlDB.RestApi.Client-DotNet
ksqlDb.RestApi.Client is a C# LINQ-enabled client API for issuing and consuming ksqlDB push and pull queries and executing statements.
MITSep 21, 2026 · metrics 2.10.0
Go
turnerlabs/fargate-create
A CLI tool for scaffolding out new AWS ECS/Fargate applications based on Terraform templates and Fargate CLI
MITSep 19, 2026 · metrics 2.10.0
crates.io
virtee/snpguest
A CLI tool for interacting with SEV-SNP guest environment
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
zoharbabin/due-diligence-agents
Legal flags a risk. Finance flags another. We connect and cite. Open-source forensic M&A due diligence: 13 AI agents read your data room across 9 domains (Legal, Finance, Commercial, Tech, Cyber, HR, Tax, Regulatory, ESG), cross-reference findings no single reviewer connects, and trace every one to an exact page & quote.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
hashicorp/terraform-provider-boundary
Manage Boundary's identity-based access controls for resources provisioned with Terraform. This provider is maintained internally by the HashiCorp Boundary team.
MPL-2.0Sep 20, 2026 · metrics 2.10.0
Go
joeig/go-powerdns
PowerDNS API client for Go (community project)
MITSep 20, 2026 · metrics 2.10.0