Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,565
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
586B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go · npm
filebrowser/filebrowser
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview and edit your files.
Apache-2.0Sep 8, 2026 · metrics 2.10.0
crates.io
paritytech/substrate
Substrate: The platform for blockchain innovators
Apache-2.0Sep 6, 2026 · metrics 2.10.0
—
blackmagic-debug/blackmagic
In-application debugger for ARM Cortex and RISC-V processors.
GPL-3.0Sep 9, 2026 · metrics 2.10.0
—
Proxmark/proxmark3
Proxmark 3
GPL-2.0Sep 10, 2026 · metrics 2.10.0
—
PomeloFoundation/Pomelo.EntityFrameworkCore.MySql
Entity Framework Core provider for MySQL and MariaDB built on top of MySqlConnector
MITSep 11, 2026 · metrics 2.10.0
NuGet
TheBerkin/rant3
(Obsolete) Archive of Rant 3.x.
MITSep 11, 2026 · metrics 2.10.0
NuGet
octokit/octokit.net
A GitHub API client library for .NET
MITSep 9, 2026 · metrics 2.10.0
—
DotNetAnalyzers/StyleCopAnalyzers
An implementation of StyleCop rules using the .NET Compiler Platform
MITSep 9, 2026 · metrics 2.10.0
npm
websockets/wscat
WebSocket cat
MITSep 6, 2026 · metrics 2.10.0
PyPI
litl/backoff
Python library providing function decorators for configurable backoff and retry
MITSep 9, 2026 · metrics 2.10.0
npm
react-pdf-viewer/react-pdf-viewer
A React component to view a PDF document
Custom licenseSep 9, 2026 · metrics 2.10.0
npm
db-migrate/node-db-migrate
Database migration framework for node
Custom licenseSep 9, 2026 · metrics 2.10.0
PyPI
google-gemini/deprecated-generative-ai-python
This SDK is now deprecated, use the new unified Google GenAI SDK.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
sevagas/macro_pack
macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
—
dotnet/pinvoke
A library containing all P/Invoke code so you don't have to import it every time. Maintained and updated to support the latest Windows OS.
MITSep 11, 2026 · metrics 2.10.0
NuGet
CollaboratingPlatypus/PetaPoco
Official PetaPoco, A tiny ORM-ish thing for your POCO's
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
handshake-org/hsd
Handshake Daemon & Full Node
Custom licenseSep 8, 2026 · metrics 2.10.0
npm
Tencent/cloudbase-framework
腾讯云开发云原生一体化部署工具 🚀 CloudBase Framework：一键部署，不限框架语言，云端一体化开发，基于Serverless 架构
Custom licenseSep 6, 2026 · metrics 2.10.0
npm
keajs/kea
Batteries Included State Management for React
MITSep 10, 2026 · metrics 2.10.0
Maven · PyPI · RubyGems
mozilla-mobile/android-components
⚠️ This project moved to a new repository. It is now developed and maintained at: https://github.com/mozilla-mobile/firefox-android
MPL-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
gotcha/ipdb
Integration of IPython pdb
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
npm
flexn-io/renative
🚀🚀🚀 Unified Development Platform for iOS, tvOS, Android, Android TV, Android Wear, Web, Tizen TV, Tizen Watch, Tizen Mobile, LG webOS, macOS/OSX, Windows, KaiOS, FirefoxOS Firefox TV platforms
MITSep 9, 2026 · metrics 2.10.0
RubyGems
github/pages-gem
A simple Ruby Gem to bootstrap dependencies for setting up and maintaining a local Jekyll environment in sync with GitHub Pages
MITSep 10, 2026 · metrics 2.10.0
PyPI
asweigart/pyperclip
Python module for cross-platform clipboard functions.
BSD-3-ClauseSep 9, 2026 · metrics 2.10.0
RubyGems
pages-themes/minimal
Minimal is a Jekyll theme for GitHub Pages
CC0-1.0Sep 10, 2026 · metrics 2.10.0
Hex
bitwalker/timex
A complete date/time library for Elixir projects.
MITSep 9, 2026 · metrics 2.10.0
npm · Maven · PyPI
microsoft/Recognizers-Text
Microsoft.Recognizers.Text provides recognition and resolution of numbers, units, date/time, etc. in multiple languages (ZH, EN, FR, ES, PT, DE, IT, TR, HI, NL. Partial support for JA, KO, AR, SV). Packages available at: https://www.nuget.org/profiles/Recognizers.Text, https://www.npmjs.com/~recognizers.text
MITSep 11, 2026 · metrics 2.10.0
PyPI
requests/requests-oauthlib
OAuthlib support for Python-Requests!
ISCSep 9, 2026 · metrics 2.10.0
Hex
pow-auth/pow
Robust, modular, and extendable user authentication system
MITSep 9, 2026 · metrics 2.10.0
Hex
devinus/poolboy
A hunky Erlang worker pool factory
ISCSep 11, 2026 · metrics 2.10.0