Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,887
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
alexbrainman/sspi
Windows SSPI
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
npm
binance/binance-connector-typescript
Simple Typescript connector to Binance API
MITSep 20, 2026 · metrics 2.10.0
Go · npm
gmuxapp/gmux
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Go
go-juicedev/juice
Like Mybatis but for golang.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
hedhyw/gherkingen
Behaviour Driven Development tests generator for Golang
MITSep 19, 2026 · metrics 2.10.0
—
jtaylortech/journalot
Minimal journaling CLI for developers. Git-backed, terminal-native, zero friction. Just type `journal` and start writing.
MITSep 20, 2026 · metrics 2.10.0
npm
nvh95/react-linkedin-login-oauth2
Easily get Authorization Code from Linked In to log in without redirecting.
MITSep 22, 2026 · metrics 2.10.0
Go
p0nymc1/cee
Deterministic-first execution engine for agent workflows in Go: the LLM extracts at the edge, a deterministic state machine decides. Zero dependencies, no-code JSON plugins, replayable runs.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
rust-embedded-community/embedded-storage
An Embedded Storage Abstraction Layer
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
cli/browser
Go helpers to open URLs, files, or readers in a web browser.
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
—
mlr-org/mlr3learners
Recommended learners for mlr3
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
RubyGems
red-data-tools/GR.rb
Ruby wrapper for the GR framework
Custom licenseSep 22, 2026 · metrics 2.10.0
PyPI
DFiantHDL/DFHDL
DFiant HDL (DFHDL): A Mutli-abstraction Hardware Descripition Language and Framework
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm · crates.io
Zondax/filecoin-solidity
Filecoin Solidity API Library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Hex
elixir-broadway/broadway_sqs
A Broadway producer for Amazon SQS
No licenseSep 21, 2026 · metrics 2.10.0
Go
iotexproject/iotex-bootstrap
All necessary configuration files and step-by-step instructions for setting up and running a full-node on the IoTeX blockchain. Start contributing to the IoTeX network and explore advanced node features.
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
phpcfdi/cfdi-sat-scraper
PHP library to make web scraping to the SAT cfdi download page
MITSep 21, 2026 · metrics 2.10.0
Go
younglifestyle/secs4go
Simple Golang SECS/GEM implementation
WTFPLSep 19, 2026 · metrics 2.10.0
Go
0hardik1/kubesplaining
Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
KazariEX/dxup
A collection of plugins to improve your development experience.
MITSep 21, 2026 · metrics 2.10.0
crates.io
Spxg/sqlite-wasm-rs
wasm32-unknown-unknown bindings to the libsqlite3 library.
MITSep 20, 2026 · metrics 2.10.0
crates.io
niklak/dom_query
A Flexible Rust Crate for DOM Querying and Manipulation
Custom licenseSep 23, 2026 · metrics 2.10.0
—
shadowproject/shadow
ShadowCore integration/staging tree
MITSep 19, 2026 · metrics 2.10.0
npm
agent-ecosystem/afdocs
Test your docs against the Agent-Friendly Documentation Spec
MITSep 23, 2026 · metrics 2.10.0
Go
cbrgm/promcheck
A tool and exporter to identify faulty Prometheus rules
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
matrix-org/matrix-widget-api
JavaScript/TypeScript API for widgets & web clients to communicate
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
openziti/llm-gateway
Zero trust LLM gateway. OpenAI-compatible proxy with semantic routing and load balancing across OpenAI, Anthropic, Ollama, vLLM, and any compatible backend. Identity-based access, virtual API keys, and end-to-end encryption via OpenZiti
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
ropensci/tidync
NetCDF exploration and data extraction
No licenseSep 20, 2026 · metrics 2.10.0
RubyGems
testdouble/put
No repository description published.
MITSep 22, 2026 · metrics 2.10.0
crates.io
awesomized/crc-fast-rust
World's fastest generic CRC calculator for all known CRC-16, CRC-32, and CRC-64 variants, as well as bring-your-own custom parameters, using SIMD intrinsics, which can exceed 100GiB/s on modern systems. Supplies a C/C++ compatible library for use with languages other than Rust.
Apache-2.0Sep 23, 2026 · metrics 2.10.0