Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,496
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
mindplay-dk/middleman
Dead simple PSR-15 / PSR-7 middleware dispatcher
No licenseJul 29, 2026 · metrics 2.10.0
npm
auth0-lab/mdl
Parse and validate MDOC CBOR encoded binaries according to ISO 18013-5.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
benjamn/wryware
A collection of packages that are probably a little too clever. Use at your own wrisk.
MITSep 8, 2026 · metrics 2.10.0
RubyGems
census-instrumentation/opencensus-ruby
A stats collection and distributed tracing framework
Apache-2.0Jul 20, 2026 · metrics 2.10.0
—
hayleigh-dot-dev/nibble
A string parsing library heavily inspired by elm/parser.
MITSep 9, 2026 · metrics 2.10.0
—
jsdom/abab
Perfectly spec-compliant atob and btoa implementations
No licenseAug 31, 2026 · metrics 2.10.0
Packagist
raphaelstolt/php-jsonpointer
JSON Pointer implementation for PHP.
MITAug 21, 2026 · metrics 2.10.0
PyPI
rosscdh/mkdocs-markdownextradata-plugin
A MkDocs plugin that injects the mkdocs.yml extra variables into the markdown template
MITJul 30, 2026 · metrics 2.10.0
PyPI
sphinx-doc/sphinxext-opengraph
Sphinx extension to generate unique OpenGraph metadata
BSD-3-ClauseSep 9, 2026 · metrics 2.10.0
Go
yeya24/promlinter
No repository description published.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Packagist
FriendsOfBehat/Mink
PHP 5.3+ web browser emulator abstraction
MITJul 30, 2026 · metrics 2.10.0
—
ddarriba/modeltest
Best-fit model selection
GPL-3.0Sep 5, 2026 · metrics 2.10.0
RubyGems
dougal/base58
Base58 is a Ruby library/gem for converting ints to and from base58.
MITJul 22, 2026 · metrics 2.10.0
Go
gorilla/css
Package gorilla/css is a CSS3 tokenizer.
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
Packagist
martin-helmich/typo3-typoscript-lint
Find coding errors in your TypoScript files.
MITJul 22, 2026 · metrics 2.10.0
crates.io
sfackler/rust-socks
No repository description published.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
—
watr/mbeacon
Turn your mac into an iBeacon.
MITAug 4, 2026 · metrics 2.10.0
—
JuliaPlanners/PDDL.jl
Julia parser, interpreter and compiler interface for the Planning Domain Definition Language (PDDL). Planners not included.
Apache-2.0Aug 8, 2026 · metrics 2.10.0
crates.io
SimonSapin/rust-std-candidates
Candidates for inclusion in the Rust standard library
MITAug 13, 2026 · metrics 2.10.0
PyPI
Teichlab/Genes2Genes
Aligning gene expression trajectories of single-cell reference and query systems
MITJul 26, 2026 · metrics 2.10.0
npm
andris9/encoding
Encode/decode strings with iconv-lite
Custom licenseAug 29, 2026 · metrics 2.10.0
PyPI
christian-oudard/htmltreediff
Structure-aware diff for html and xml documents
BSD-3-ClauseAug 23, 2026 · metrics 2.10.0
—
dart-archive/csslib
A library for parsing CSS.
BSD-3-ClauseAug 2, 2026 · metrics 2.10.0
PyPI
pqzx/html2docx
Convert html to docx
MITAug 19, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-to-jsx-runtime
hast utility to transform to preact, react, solid, svelte, vue, etc
MITAug 31, 2026 · metrics 2.10.0
crates.io
yoshuawuyts/fd-lock
Advisory cross-platform file locks using file descriptors
Apache-2.0Aug 22, 2026 · metrics 2.10.0
—
JeffreySarnoff/NamedTupleTools.jl
some utilities for working with NamedTuples
MITAug 8, 2026 · metrics 2.10.0
PyPI
Kazhuu/asm2cfg
Python command-line tool and GDB extension to view and save x86, ARM and objdump assembly files as control-flow graph (CFG) pdf files
MITAug 23, 2026 · metrics 2.10.0
PyPI
chihongze/girlfriend
基于工作流的Python脚本引擎，从此写代码就像做填空题 ~
MITAug 2, 2026 · metrics 2.10.0
crates.io
droundy/arrayref
Two macros for taking array references in rust.
BSD-2-ClauseAug 8, 2026 · metrics 2.10.0