Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,842
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
p0nymc1/cee
Deterministic-first execution engine for agent workflows in Go: the LLM extracts at the edge, a deterministic state machine decides. Zero dependencies, no-code JSON plugins, replayable runs.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
rust-embedded-community/embedded-storage
An Embedded Storage Abstraction Layer
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
cli/browser
Go helpers to open URLs, files, or readers in a web browser.
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
npm
freema/mcp-gsheets
MCP server for Google Sheets - Read, write and manipulate spreadsheets through Claude Desktop
MITSep 18, 2026 · metrics 2.10.0
—
mlr-org/mlr3learners
Recommended learners for mlr3
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
RubyGems
red-data-tools/GR.rb
Ruby wrapper for the GR framework
Custom licenseSep 22, 2026 · metrics 2.10.0
PyPI
DFiantHDL/DFHDL
DFiant HDL (DFHDL): A Mutli-abstraction Hardware Descripition Language and Framework
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm · crates.io
Zondax/filecoin-solidity
Filecoin Solidity API Library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Hex
elixir-broadway/broadway_sqs
A Broadway producer for Amazon SQS
No licenseSep 21, 2026 · metrics 2.10.0
Go
iotexproject/iotex-bootstrap
All necessary configuration files and step-by-step instructions for setting up and running a full-node on the IoTeX blockchain. Start contributing to the IoTeX network and explore advanced node features.
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
phpcfdi/cfdi-sat-scraper
PHP library to make web scraping to the SAT cfdi download page
MITSep 21, 2026 · metrics 2.10.0
Go
younglifestyle/secs4go
Simple Golang SECS/GEM implementation
WTFPLSep 19, 2026 · metrics 2.10.0
Go
0hardik1/kubesplaining
Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
KazariEX/dxup
A collection of plugins to improve your development experience.
MITSep 21, 2026 · metrics 2.10.0
crates.io
Spxg/sqlite-wasm-rs
wasm32-unknown-unknown bindings to the libsqlite3 library.
MITSep 20, 2026 · metrics 2.10.0
crates.io
niklak/dom_query
A Flexible Rust Crate for DOM Querying and Manipulation
Custom licenseSep 23, 2026 · metrics 2.10.0
—
shadowproject/shadow
ShadowCore integration/staging tree
MITSep 19, 2026 · metrics 2.10.0
npm
agent-ecosystem/afdocs
Test your docs against the Agent-Friendly Documentation Spec
MITSep 23, 2026 · metrics 2.10.0
Go
cbrgm/promcheck
A tool and exporter to identify faulty Prometheus rules
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
matrix-org/matrix-widget-api
JavaScript/TypeScript API for widgets & web clients to communicate
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
openziti/llm-gateway
Zero trust LLM gateway. OpenAI-compatible proxy with semantic routing and load balancing across OpenAI, Anthropic, Ollama, vLLM, and any compatible backend. Identity-based access, virtual API keys, and end-to-end encryption via OpenZiti
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
ropensci/tidync
NetCDF exploration and data extraction
No licenseSep 20, 2026 · metrics 2.10.0
RubyGems
testdouble/put
No repository description published.
MITSep 22, 2026 · metrics 2.10.0
crates.io
awesomized/crc-fast-rust
World's fastest generic CRC calculator for all known CRC-16, CRC-32, and CRC-64 variants, as well as bring-your-own custom parameters, using SIMD intrinsics, which can exceed 100GiB/s on modern systems. Supplies a C/C++ compatible library for use with languages other than Rust.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
databricks/appkit
Build Databricks Apps faster with our brand-new Node.js + React SDK. Built for humans and AI.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
devfile/devworkspace-operator
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
elastic/go-windows
go-windows provides Go wrappers for Windows APIs.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
gofiber/cli
Fiber Command Line Interface
MITSep 20, 2026 · metrics 2.10.0
crates.io
gtk-rs/glib
DEPRECATED, use https://github.com/gtk-rs/gtk-rs-core repository instead!
MITSep 18, 2026 · metrics 2.10.0
npm
iden3/circomlibjs
Javascript library to work with circomlib circuits
No licenseSep 20, 2026 · metrics 2.10.0