Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,730
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI · Go · Maven
bufbuild/protoc-gen-validate
Protocol Buffer Validation - replaced by https://github.com/bufbuild/protovalidate
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
MITAug 27, 2026 · metrics 2.10.0
Go
AlecAivazis/survey
A golang library for building interactive and accessible prompts with full support for windows and posix terminals.
MITAug 29, 2026 · metrics 2.10.0
crates.io
xacrimon/dashmap
Blazing fast concurrent HashMap for Rust.
MITAug 8, 2026 · metrics 2.10.0
npm
draft-js-plugins/draft-js-plugins
React Plugin Architecture for Draft.js including Slack-Like Emojis, FB-Like Mentions and Stickers
MITAug 28, 2026 · metrics 2.10.0
Packagist
LaravelCollective/html
HTML and Form Builders for the Laravel Framework
MITAug 22, 2026 · metrics 2.10.0
RubyGems
awesome-print/awesome_print
Pretty print your Ruby objects with style -- in full color and with proper indentation
MITAug 28, 2026 · metrics 2.10.0
npm
ts-essentials/ts-essentials
All essential TypeScript types in one place 🤙
MITAug 12, 2026 · metrics 2.10.0
PyPI
speedyapply/JobSpy
Jobs scraper library for LinkedIn, Indeed, Glassdoor, Google, ZipRecruiter & more
MITAug 13, 2026 · metrics 2.10.0
crates.io
async-rs/async-std
Async version of the Rust standard library
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
rspeer/python-ftfy
Fixes mojibake and other glitches in Unicode text, after the fact.
Custom licenseAug 27, 2026 · metrics 2.10.0
NuGet
mcintyre321/OneOf
Easy to use F#-like ~discriminated~ unions for C# with exhaustive compile time matching
MITAug 29, 2026 · metrics 2.10.0
PyPI
fake-useragent/fake-useragent
Up-to-date simple useragent faker with real world database
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
taiga-family/taiga-ui
Angular components library for awesome people
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
xcpretty/xcpretty
Flexible and fast xcodebuild formatter
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
hello-pangea/dnd
💅 Beautiful and accessible drag and drop for lists with React. ⭐️ Star to support our work!
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
stacktracejs/stacktrace.js
Generate, parse, and enhance JavaScript stack traces in all web browsers
MITAug 12, 2026 · metrics 2.10.0
npm
tulios/kafkajs
A modern Apache Kafka client for node.js
MITAug 13, 2026 · metrics 2.10.0
PyPI
encode/databases
Async database support for Python. 🗄
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
Packagist
FakerPHP/Faker
Faker is a PHP library that generates fake data for you
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
grantjenks/python-sortedcontainers
Python Sorted Container Types: Sorted List, Sorted Dict, and Sorted Set
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
boppreh/keyboard
Hook and simulate global keyboard events on Windows and Linux.
MITAug 12, 2026 · metrics 2.10.0
PyPI
pyppeteer/pyppeteer
Headless chrome/chromium automation library (unofficial port of puppeteer)
Custom licenseAug 13, 2026 · metrics 2.10.0
NuGet
icsharpcode/SharpZipLib
#ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.
MITAug 28, 2026 · metrics 2.10.0
NuGet · npm
thomhurst/TUnit
A modern, fast and flexible .NET testing framework
MITAug 28, 2026 · metrics 2.10.0
—
fatih/structs
Utilities for Go structs
MITAug 29, 2026 · metrics 2.10.0
RubyGems
celluloid/celluloid
Actor-based concurrent object framework for Ruby
MITJul 21, 2026 · metrics 2.10.0
PyPI
pika/pika
Pure Python RabbitMQ/AMQP 0-9-1 client library
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
PyPI
elastic/elasticsearch-dsl-py
High level Python client for Elasticsearch
Apache-2.0Jul 28, 2026 · metrics 2.10.0
Packagist
defuse/php-encryption
Simple Encryption in PHP.
MITAug 27, 2026 · metrics 2.10.0