Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,248
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
jonschlinkert/is-windows
Returns true if the platform is Windows (and Cygwin or MSYS/MinGW for unit tests)
MITSep 16, 2026 · metrics 2.10.0
—
qu1x/huawei-wmi
Sets group write privileges and reinstates battery charge-thresholds.
No licenseSep 19, 2026 · metrics 2.10.0
—
JuliaReinforcementLearning/CommonRLInterface.jl
A minimal reinforcement learning environment interface with additional opt-in features.
MITSep 17, 2026 · metrics 2.10.0
crates.io
nvzqz/embed-plist-rs
Embed property list files like Info.plist directly in your Rust executable binary
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
quasilyte/gogrep
Syntax-aware Go code search, based on the mvdan/gogrep
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
sashamelentyev/usestdlibvars
A linter that detect the possibility to use variables/constants from the Go standard library.
MITSep 16, 2026 · metrics 2.10.0
—
JuliaGeometry/Contour.jl
Calculating contour curves for 2D scalar fields in Julia
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
catenacyber/perfsprint
Golang linter to use strconv
MITSep 16, 2026 · metrics 2.10.0
npm
dotCMS/core-web
dotCMS UI
No licenseSep 20, 2026 · metrics 2.10.0
—
meskio/tudu
A comand line interface to manage hierarchical todos
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
sindresorhus/path-key
Get the PATH environment variable key cross-platform
MITSep 16, 2026 · metrics 2.10.0
Go
AlekSi/hardcache
Tool for managing the Go build cache
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
crates.io
AltSysrq/rusty-fork
Run Rust tests in isolated subprocesses
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
Iotic-Labs/py-ubjson
Universal Binary JSON draft-12 serializer for Python
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm · Maven
NativeScript/capacitor
NativeScript for Capacitor
No licenseSep 16, 2026 · metrics 2.10.0
crates.io
dirs-dev/dirs-sys-rs
moved to https://codeberg.org/dirs/dirs-sys-rs
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
sbercloud-terraform/terraform-provider-sbercloud
Terraform SberCloud Provider
MPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
scrapy-plugins/scrapy-jsonschema
Scrapy schema validation pipeline and Item builder using JSON Schema
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
PyPI
ebeweber/flake8-mutable
flake8 extension for mutable default arguments
MITSep 17, 2026 · metrics 2.10.0
Maven
huaweicloud/huaweicloud-sdk-java
No repository description published.
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
kartik-v/yii2-widget-typeahead
Enhanced Yii2 wrapper for the Twitter Typeahead plugin (sub repo split from yii2-widgets).
Custom licenseSep 19, 2026 · metrics 2.10.0
—
niftynei/glightning
A Golang driver for c-lightning. Includes both an RPC client and plugin framework
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
nknorg/nkn-sdk-js
JavaScript Implementation of NKN Client and Wallet SDK
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
teamcfadvance/ValidateThis
An object oriented validation framework for ColdFusion objects
No licenseSep 17, 2026 · metrics 2.10.0
Go
42atomys/webhooked
A webhook receiver on steroids.
MITSep 18, 2026 · metrics 2.10.0
crates.io
firstbatchxyz/dkn-compute-launcher
Cross-platform launcher for Dria Compute Node.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
hellman/cry
SageMath/Python Toolkit for Cryptanalytic Research
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
un33k/python-ipware
Returns the best matched IP address from a given HTTP(s) header in Python
MITSep 17, 2026 · metrics 2.10.0
Packagist · npm
ariaieboy/filament-jalali
Add Jalali/Shamsi Support to FilamentPHP
MITSep 17, 2026 · metrics 2.10.0
npm
marcuswestin/node-kafka
NOT MAINTAINED. See below:
MITSep 20, 2026 · metrics 2.10.0