Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,758
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
DmitryTsepelev/ar_lazy_preload
Lazy loading associations for the ActiveRecord models
MITJul 20, 2026 · metrics 2.10.0
Packagist
mustangostang/spyc
A simple YAML loader/dumper class for PHP
MITAug 22, 2026 · metrics 2.10.0
RubyGems · npm
rmagick/rmagick
Ruby bindings for ImageMagick
MITJul 20, 2026 · metrics 2.10.0
Go
gorilla/securecookie
Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Go
jonboulle/clockwork
a fake clock for golang
Apache-2.0Jul 27, 2026 · metrics 2.10.0
npm
microsoft/botbuilder-js
Welcome to the Bot Framework SDK for JavaScript repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using JavaScript.
MITAug 27, 2026 · metrics 2.10.0
Go
rivo/uniseg
Unicode Text Segmentation, Word Wrapping, and String Width Calculation in Go
MITJul 28, 2026 · metrics 2.10.0
Packagist
dflydev/dflydev-dot-access-data
Given a deep data structure representing a configuration, access configuration by dot notation.
MITAug 27, 2026 · metrics 2.10.0
npm
lisaogren/axios-cache-adapter
Caching adapter for axios. Store request results in a configurable store to prevent unneeded network requests.
MITAug 2, 2026 · metrics 2.10.0
Maven
SciProgCentre/kmath
Kotlin mathematics extensions library
Custom licenseJul 26, 2026 · metrics 2.10.0
PyPI
taskipy/taskipy
the complementary task runner for python
MITJul 30, 2026 · metrics 2.10.0
npm
mhart/aws4
Signs and prepares Node.js requests using AWS Signature Version 4
MITAug 31, 2026 · metrics 2.10.0
Hex
gen-smtp/gen_smtp
The extensible Erlang SMTP client and server library.
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
scrivo/highlight.php
A port of highlight.js by Ivan Sagalaev to PHP
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
gaogaotiantian/objprint
A library that can print Python objects in human readable format
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Hex
xerions/phoenix_swagger
Swagger integration to Phoenix framework
MPL-2.0Sep 9, 2026 · metrics 2.10.0
—
intel/intel-graphics-compiler
No repository description published.
Custom licenseJul 20, 2026 · metrics 2.10.0
RubyGems
nahi/httpclient
'httpclient' gives something like the functionality of libwww-perl (LWP) in Ruby.
No licenseJul 22, 2026 · metrics 2.10.0
RubyGems
resque/redis-namespace
This gem adds a Redis::Namespace class which can be used to namespace Redis keys.
MITJul 22, 2026 · metrics 2.10.0
Maven
tony-framework/TonY
TonY is a framework to natively run deep learning frameworks on Apache Hadoop.
Custom licenseSep 8, 2026 · metrics 2.10.0
—
riscv-software-src/riscv-pk
RISC-V Proxy Kernel
Custom licenseJul 25, 2026 · metrics 2.10.0
PyPI
pydanny/cached-property
A decorator for caching properties in classes.
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
roy-ht/editdistance
Fast implementation of the edit distance(Levenshtein distance)
MITAug 27, 2026 · metrics 2.10.0
RubyGems
sass/sassc-rails
Integrate SassC-Ruby with Rails!
MITJul 20, 2026 · metrics 2.10.0
PyPI
einsteinpy/einsteinpy
Repository for the EinsteinPy core package :rocket:
MITAug 23, 2026 · metrics 2.10.0
NuGet
OfficeDev/Open-Xml-PowerTools
No repository description published.
MITJul 18, 2026 · metrics 2.10.0
Go · crates.io · PyPI
doyoubi/undermoon
Mordern Redis Cluster solution for easy operation.
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Packagist
php-gettext/Gettext
PHP library to collect and manipulate gettext (.po, .mo, .php, .json, etc)
MITAug 13, 2026 · metrics 2.10.0
Hex
elixir-toniq/norm
Data specification and generation
MITSep 9, 2026 · metrics 2.10.0
Hex
talentdeficit/jsx
an erlang application for consuming, producing and manipulating json. inspired by yajl
MITJul 22, 2026 · metrics 2.10.0