Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,309
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
d3/d3-time
A calculator for humanity’s peculiar conventions of time.
ISCOct 21, 2026 · metrics 2.10.0
npm
node-modules/address
Get current machine IP and MAC address.
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
didix21/mdutils
Python package contains a set of basic tools that can help to create a markdown file.
MITOct 20, 2026 · metrics 2.10.0
Packagist · npm
KABBOUCHI/nova-impersonate
A Laravel Nova field allows you to authenticate as your users.
MITOct 22, 2026 · metrics 2.10.0
PyPI
python/typed_ast
Modified fork of CPython's ast module that parses `# type:` comments
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist · npm
yiisoft/yii2-framework
[READ ONLY] Yii 2 framework core code only. This is a subtree split off the "yii2" repository
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go
commander-cli/commander
Test your command line interfaces on windows, linux and osx and nodes viá ssh and docker
MITOct 19, 2026 · metrics 2.10.0
—
OpenHands/agent-canvas
OpenHands Agent Canvas is a Open Source AI coding platform. Start locally, connect your tools, and automate workflows.
No licenseOct 21, 2026 · metrics 2.10.0
Maven · npm
revapi/revapi
Revapi is an API analysis and change tracking tool written in Java. Its focus is mainly on Java language itself but it has been specifically designed to not be limited to just Java. API is much more than just java classes - also various configuration files, schemas, etc. can contribute to it and users can become reliant on them.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
szmarczak/cacheable-lookup
A cacheable dns.lookup(…) that respects TTL :tada:
MITOct 21, 2026 · metrics 2.10.0
—
mapbox/eternal
A C++14 compile-time/constexpr map and hash map with minimal binary footprint
ISCOct 20, 2026 · metrics 2.10.0
PyPI
plizonczyk/noiseprotocol
Noise Protocol Framework - Python 3 implementation
MITOct 20, 2026 · metrics 2.10.0
—
ivanseidel/DueTimer
⏳ Timer Library fully implemented for Arduino DUE
MITOct 22, 2026 · metrics 2.10.0
npm
nadavspi/obsidian-relative-line-numbers
No repository description published.
No licenseOct 20, 2026 · metrics 2.10.0
crates.io
ibraheemdev/boxcar
A concurrent, append-only vector.
MITOct 19, 2026 · metrics 2.10.0
—
lispci/fiveam
Common Lisp regression testing framework
BSD-3-ClauseOct 18, 2026 · metrics 2.10.0
Go
Azure/go-autorest
This package implements an HTTP request pipeline suitable for use across multiple go-routines and provides the shared routines relied on by AutoRest generated Go code.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
natefinch/atomic
atomic is a go package for atomic file writing
MITOct 21, 2026 · metrics 2.10.0
crates.io
dcuddeback/libusb-rs
A safe Rust wrapper for libusb.
MITOct 18, 2026 · metrics 2.10.0
npm
dgraham/eslint-plugin-jquery
Disallow jQuery functions with native equivalents.
MITOct 18, 2026 · metrics 2.10.0
Packagist
glushkovds/phpclickhouse-laravel
Adapter of the most popular library https://github.com/smi2/phpClickHouse to Laravel
MITOct 19, 2026 · metrics 2.10.0
npm
input-output-hk/scrypto
Cryptographic primitives for Scala
CC0-1.0Oct 19, 2026 · metrics 2.10.0
Packagist
swayok/alternative-laravel-cache
Replacements for Laravel's redis and file cache stores that properly implement tagging idea
MITOct 19, 2026 · metrics 2.10.0
Go
FactomProject/factomd
Factom Daemon
Custom licenseOct 17, 2026 · metrics 2.10.0
npm
d3/d3-path
Serialize Canvas path commands to SVG.
ISCOct 21, 2026 · metrics 2.10.0
Maven · npm
bmwcarit/joynr
A transport protocol agnostic (MQTT, HTTP, WebSockets etc.) Franca IDL based communication framework supporting multiple communication paradigms (RPC, Pub-Sub, broadcast etc.)
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
basepom/duplicate-finder-maven-plugin
Maven plugin to find duplicate classes or resources
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
litixsoft/karma-mocha-reporter
Karma reporter plugin with mocha style logging.
Custom licenseOct 18, 2026 · metrics 2.10.0
npm
Pythe1337N/garmin-connect
Makes it simple to interface with Garmin Connect to get or set any data point.
MITOct 20, 2026 · metrics 2.10.0
Go
google/shlex
Automatically exported from code.google.com/p/go-shlex
Apache-2.0Oct 20, 2026 · metrics 2.10.0