Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,299
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · npm
Finsys/dockhand
Dockhand - Docker management you will like.
Custom licenseOct 22, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/exporter
Provides the functionality to export PHP variables for visualization
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
dhowe/AdNauseam
AdNauseam: Fight back against advertising surveillance
GPL-3.0Oct 19, 2026 · metrics 2.10.0
Maven
jOOQ/jOOQ
jOOQ is the best way to write SQL in Java
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
max-mapper/menubar
➖ high level way to create menubar desktop applications with electron
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
Go
nats-io/nats.go
Golang client for NATS, the cloud native messaging system.
Apache-2.0Oct 17, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/environment
Provides functionality that helps writing PHP code that has runtime-specific execution paths
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
binaricat/Netcatty
SSH workspace, SFTP, and terminals in one
GPL-3.0Oct 22, 2026 · metrics 2.10.0
PyPI
microsoft/LLMLingua
[EMNLP'23, ACL'24] To speed up LLMs' inference and enhance LLM's perceive of key information, compress the prompt and KV-Cache, which achieves up to 20x compression with minimal performance loss.
MITOct 19, 2026 · metrics 2.10.0
npm · Packagist
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go · PyPI
btcsuite/btcd
An alternative full node bitcoin implementation written in Go (golang)
ISCOct 22, 2026 · metrics 2.10.0
Packagist
thephpleague/oauth2-server
A spec compliant, secure by default PHP OAuth 2.0 Server
MITOct 20, 2026 · metrics 2.10.0
npm · crates.io
automerge/automerge
A JSON-like data structure (a CRDT) that can be modified concurrently by different users, and merged again automatically.
MITOct 20, 2026 · metrics 2.10.0
—
erincatto/box3d
Box3D is a 3D physics engine for games
MITOct 20, 2026 · metrics 2.10.0
Maven
hazelcast/hazelcast
Hazelcast is a unified real-time data platform combining stream processing with a fast data store, allowing customers to act instantly on data-in-motion for real-time insights.
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
ipfs/ipfs-desktop
An unobtrusive and user-friendly desktop application for IPFS on Windows, Mac and Linux.
MITOct 19, 2026 · metrics 2.10.0
Go
xataio/pgroll
PostgreSQL zero-downtime migrations made easy
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Packagist
symfony/translation
Provides tools to internationalize your application
MITOct 20, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/global-state
Snapshotting of global state, factored out of PHPUnit into a stand-alone component
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go · PyPI
open-telemetry/opentelemetry-go
OpenTelemetry Go API and SDK
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/version
Library that helps with managing the version number of Git-hosted PHP projects
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/recursion-context
Provides functionality to recursively process PHP variables
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go
cloudquery/cloudquery
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
MPL-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
larastan/larastan
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
MITOct 20, 2026 · metrics 2.10.0
npm
getsentry/MobileBuildMCP
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
MITOct 21, 2026 · metrics 2.10.0
Go
gobwas/ws
A tiny WebSocket library for Go.
MITOct 21, 2026 · metrics 2.10.0
PyPI
modelscope/FunClip
FunASR-powered video transcription, subtitle generation, and LLM-assisted clipping tool with a local Gradio UI.
MITOct 21, 2026 · metrics 2.10.0
Go
manifoldco/promptui
Interactive prompt for command-line applications
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Maven
AsyncHttpClient/async-http-client
Asynchronous, non-blocking HTTP & WebSocket client for the JVM
Apache-2.0Oct 19, 2026 · metrics 2.10.0