Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,725
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
dholroyd/h264-reader
Rust reader for H264 bitsream syntax
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Hex
elixir-broadway/broadway_sqs
A Broadway producer for Amazon SQS
No licenseSep 21, 2026 · metrics 2.10.0
—
fsprojects/FSharp.Interop.Dynamic
DLR interop for F# -- works like dynamic keyword in C#
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
homebridge/ciao
RFC 6762 and RFC 6763 compliant mdns service discovery library written in Typescript
MITSep 18, 2026 · metrics 2.10.0
Go
iotexproject/iotex-bootstrap
All necessary configuration files and step-by-step instructions for setting up and running a full-node on the IoTeX blockchain. Start contributing to the IoTeX network and explore advanced node features.
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
phpcfdi/cfdi-sat-scraper
PHP library to make web scraping to the SAT cfdi download page
MITSep 21, 2026 · metrics 2.10.0
npm
udivankin/sunrise-sunset-js
High-precision sunrise, sunset, twilight, golden-hour & solar-position calculation for JavaScript / TypeScript. Based on NREL's Solar Position Algorithm (SPA). Zero runtime deps, ESM + CommonJS, native Temporal support.
No licenseSep 18, 2026 · metrics 2.10.0
Go
younglifestyle/secs4go
Simple Golang SECS/GEM implementation
WTFPLSep 19, 2026 · metrics 2.10.0
Go
0hardik1/kubesplaining
Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
KazariEX/dxup
A collection of plugins to improve your development experience.
MITSep 21, 2026 · metrics 2.10.0
crates.io
Spxg/sqlite-wasm-rs
wasm32-unknown-unknown bindings to the libsqlite3 library.
MITSep 20, 2026 · metrics 2.10.0
Go
aws-controllers-k8s/code-generator
Code generator for AWS Controllers for Kubernetes
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
niklak/dom_query
A Flexible Rust Crate for DOM Querying and Manipulation
Custom licenseSep 23, 2026 · metrics 2.10.0
—
shadowproject/shadow
ShadowCore integration/staging tree
MITSep 19, 2026 · metrics 2.10.0
npm
agent-ecosystem/afdocs
Test your docs against the Agent-Friendly Documentation Spec
MITSep 23, 2026 · metrics 2.10.0
Go
cbrgm/promcheck
A tool and exporter to identify faulty Prometheus rules
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
matrix-org/matrix-widget-api
JavaScript/TypeScript API for widgets & web clients to communicate
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
openziti/llm-gateway
Zero trust LLM gateway. OpenAI-compatible proxy with semantic routing and load balancing across OpenAI, Anthropic, Ollama, vLLM, and any compatible backend. Identity-based access, virtual API keys, and end-to-end encryption via OpenZiti
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
ropensci/tidync
NetCDF exploration and data extraction
No licenseSep 20, 2026 · metrics 2.10.0
RubyGems
testdouble/put
No repository description published.
MITSep 22, 2026 · metrics 2.10.0
crates.io
awesomized/crc-fast-rust
World's fastest generic CRC calculator for all known CRC-16, CRC-32, and CRC-64 variants, as well as bring-your-own custom parameters, using SIMD intrinsics, which can exceed 100GiB/s on modern systems. Supplies a C/C++ compatible library for use with languages other than Rust.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
crates.io
besok/graphviz-rust
The library provides basic functions to work with Graphviz dot lang from rust code.
MITSep 18, 2026 · metrics 2.10.0
npm
databricks/appkit
Build Databricks Apps faster with our brand-new Node.js + React SDK. Built for humans and AI.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
devfile/devworkspace-operator
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
elastic/go-windows
go-windows provides Go wrappers for Windows APIs.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
gofiber/cli
Fiber Command Line Interface
MITSep 20, 2026 · metrics 2.10.0
crates.io
gtk-rs/glib
DEPRECATED, use https://github.com/gtk-rs/gtk-rs-core repository instead!
MITSep 18, 2026 · metrics 2.10.0
npm
iden3/circomlibjs
Javascript library to work with circomlib circuits
No licenseSep 20, 2026 · metrics 2.10.0
Go
koron/iferr
Generate "if err != nil {" block
MITSep 19, 2026 · metrics 2.10.0
npm
lambrospetrou/durable-utils
Utilities for Cloudflare Durable Objects and Workers
MITSep 22, 2026 · metrics 2.10.0