Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,629
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
586B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
microsoft/BlingFire
A lightning fast Finite State machine and REgular expression manipulation library.
MITAug 13, 2026 · metrics 2.10.0
NuGet
mikependon/RepoDB
A production-ready data access platform for .NET applications.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
shouldjs/should.js
BDD style assertions for node.js -- test framework agnostic
MITAug 13, 2026 · metrics 2.10.0
npm
feross/buffer
The buffer module from node.js, for the browser.
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
alpacahq/alpaca-trade-api-python
Python client for Alpaca's trade API
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
tdegrunt/jsonschema
JSON Schema validation
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
github/pages-gem
A simple Ruby Gem to bootstrap dependencies for setting up and maintaining a local Jekyll environment in sync with GitHub Pages
MITSep 10, 2026 · metrics 2.10.0
crates.io
mosuka/bayard
A full-text search and indexing server written in Rust.
MITJul 28, 2026 · metrics 2.10.0
PyPI
timsainb/noisereduce
Noise reduction in python using spectral gating (speech, bioacoustics, audio, time-domain signals)
MITAug 13, 2026 · metrics 2.10.0
npm
fent/randexp.js
Create random strings that match a given regular expression.
MITAug 13, 2026 · metrics 2.10.0
PyPI
long2ice/fastapi-cache
fastapi-cache is a tool to cache fastapi response and function result, with backends support redis and memcached.
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
alexreardon/tiny-invariant
A tiny invariant function
MITAug 13, 2026 · metrics 2.10.0
npm
bripkens/connect-history-api-fallback
Fallback to index.html for applications that are using the HTML 5 history API
MITAug 13, 2026 · metrics 2.10.0
npm
contiamo/restful-react
A consistent, declarative way of interacting with RESTful backends, featuring code-generation from Swagger and OpenAPI specs 🔥
MITJul 25, 2026 · metrics 2.10.0
PyPI
asweigart/pyperclip
Python module for cross-platform clipboard functions.
BSD-3-ClauseSep 9, 2026 · metrics 2.10.0
npm
webpack-contrib/file-loader
File Loader
MITAug 13, 2026 · metrics 2.10.0
PyPI
descriptinc/descript-audio-codec
State-of-the-art audio codec with 90x compression factor. Supports 44.1kHz, 24kHz, and 16kHz mono/stereo audio.
MITAug 13, 2026 · metrics 2.10.0
Packagist
shuchkin/simplexlsx
Parse and retrieve data from Excel XLSx files
MITAug 11, 2026 · metrics 2.10.0
Packagist
schmittjoh/metadata
Metadata is a library for metadata management in PHP
MITAug 4, 2026 · metrics 2.10.0
RubyGems
DamirSvrtan/fasterer
:zap: Don't make your Rubies go fast. Make them go fasterer ™. :zap:
MITJul 30, 2026 · metrics 2.10.0
—
georgezhao2010/midea_ac_lan
Auto-configure and then control your Midea M-Smart devices (Air conditioner, Fan, Water heater, Washer, etc) via local area network.
MITAug 28, 2026 · metrics 2.10.0
npm
hughsk/flat
:steam_locomotive: Flatten/unflatten nested Javascript objects
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
RubyGems
pages-themes/minimal
Minimal is a Jekyll theme for GitHub Pages
CC0-1.0Sep 10, 2026 · metrics 2.10.0
npm
frenic/csstype
Strict TypeScript and Flow types for style based on MDN data
MITAug 4, 2026 · metrics 2.10.0
Hex
bitwalker/timex
A complete date/time library for Elixir projects.
MITSep 9, 2026 · metrics 2.10.0
npm
mridgway/hoist-non-react-statics
Copies non-react specific statics from a child component to a parent component
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
catherinedevlin/ipython-sql
%%sql magic for IPython, hopefully evolving into full SQL client
MITAug 13, 2026 · metrics 2.10.0
npm · Maven · PyPI
microsoft/Recognizers-Text
Microsoft.Recognizers.Text provides recognition and resolution of numbers, units, date/time, etc. in multiple languages (ZH, EN, FR, ES, PT, DE, IT, TR, HI, NL. Partial support for JA, KO, AR, SV). Packages available at: https://www.nuget.org/profiles/Recognizers.Text, https://www.npmjs.com/~recognizers.text
MITSep 11, 2026 · metrics 2.10.0
npm
nexxtway/react-rainbow
🌈 React Rainbow Components. Build your web application in a snap.
MITJul 26, 2026 · metrics 2.10.0
npm
ilearnio/module-alias
Register aliases of directories and custom module paths in Node
MITAug 13, 2026 · metrics 2.10.0