Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,348
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
workhorsy/py-cpuinfo
A module for getting CPU info with pure Python
MITSep 9, 2026 · metrics 2.10.0
npm
Obsidian-TTRPG-Community/dice-roller
Inline dice rolling for Obsidian.md
No licenseAug 28, 2026 · metrics 2.10.0
npm
d3/d3-drag
Drag and drop SVG, HTML or Canvas using mouse or touch input.
ISCAug 4, 2026 · metrics 2.10.0
crates.io · npm
b-inary/desktop-postflop
[Development suspended] Advanced open-source Texas Hold'em GTO solver with optimized performance
AGPL-3.0Aug 1, 2026 · metrics 2.10.0
crates.io
maciejhirsz/ramhorns
Fast Mustache template engine implementation in pure Rust.
MPL-2.0Aug 15, 2026 · metrics 2.10.0
—
pawn-lang/compiler
Pawn compiler for SA-MP with bug fixes and new features - runs on Windows, Linux, macOS
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
enlightn/security-checker
A PHP dependency vulnerabilities scanner based on the Security Advisories Database.
MITAug 13, 2026 · metrics 2.10.0
Packagist
friends-of-reactphp/mysql
Async MySQL database client for ReactPHP.
MITJul 25, 2026 · metrics 2.10.0
PyPI
al45tair/netifaces
No repository description published.
MITJul 28, 2026 · metrics 2.10.0
RubyGems
attr-encrypted/encryptor
A simple wrapper for the standard ruby OpenSSL library
MITJul 21, 2026 · metrics 2.10.0
npm
d3/d3-time-format
Parse and format times, inspired by strptime and strftime.
ISCAug 31, 2026 · metrics 2.10.0
crates.io
tailhook/quick-error
A rust-macro which makes errors easy to write
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Hex
potatosalad/erlang-jose
JSON Object Signing and Encryption (JOSE) for Erlang and Elixir
MITSep 9, 2026 · metrics 2.10.0
Packagist
lanthaler/JsonLD
JSON-LD processor for PHP
MITAug 22, 2026 · metrics 2.10.0
crates.io
webdesus/fs_extra
Expanding opportunities standard library std::fs and std::io
MITAug 8, 2026 · metrics 2.10.0
—
allenai/openie-standalone
Quality information extraction at web scale. Edit
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
box/viewer.js
A viewer for documents converted with the Box View API
Apache-2.0Sep 9, 2026 · metrics 2.10.0
PyPI
appliedzkp/zkevm-specs
No repository description published.
No licenseJul 17, 2026 · metrics 2.10.0
Go
go4org/go4
go4 hosts the go4.org packages.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-mongodb
Yii 2 MongoDB extension
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
npm
ajafff/tsutils
utility functions for working with typescript's AST
MITAug 31, 2026 · metrics 2.10.0
npm
dougwilson/nodejs-depd
Deprecate all the things
MITAug 4, 2026 · metrics 2.10.0
npm
gristlabs/ts-interface-checker
Runtime library to validate data against TypeScript interfaces.
Apache-2.0Aug 31, 2026 · metrics 2.10.0
RubyGems
guard/rb-inotify
A thorough inotify wrapper for Ruby using FFI.
MITJul 22, 2026 · metrics 2.10.0
PyPI
kata198/func_timeout
Python module which allows you to specify timeouts when calling any existing function, and support for stoppable threads
LGPL-3.0Aug 8, 2026 · metrics 2.10.0
npm · Maven · RubyGems
Instabug/Instabug-React-Native
In-app feedback and bug reporting tool for React Native
MITAug 23, 2026 · metrics 2.10.0
—
esri/arcgis-runtime-samples-ios
Swift samples demonstrating various capabilities of ArcGIS Runtime SDK for iOS
Apache-2.0Jul 18, 2026 · metrics 2.10.0
—
kframework/c-semantics
Semantics of C in K
Custom licenseJul 23, 2026 · metrics 2.10.0
npm
discordjs/voice
Implementation of the Discord Voice API for discord.js and other JS/TS libraries
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
maxcountryman/flask-bcrypt
Flask-Bcrypt is a Flask extension that provides bcrypt hashing utilities for your application.
Custom licenseAug 27, 2026 · metrics 2.10.0