Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,364
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
aspect-archives/toolchains_protoc
Pre-built protoc binary toolchain for Bazel, fetched from official protobuf releases
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist · npm
mautic/plugin-grapesjs-builder
GrapesJS HTML and MJML integration for Mautic
No licenseOct 21, 2026 · metrics 2.10.0
npm
colorjs/color-parse
Color string parser
MITOct 21, 2026 · metrics 2.10.0
npm
jpillora/node-glob-all
Provide multiple patterns to node-glob
No licenseOct 18, 2026 · metrics 2.10.0
Maven
stephenc/jcip-annotations
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
stevenvachon/relateurl
Create a relative URL with options to minify.
MITOct 21, 2026 · metrics 2.10.0
Packagist
JBZoo/Composer-Diff
See what packages have changed after `composer update`
MITOct 20, 2026 · metrics 2.10.0
npm
PeculiarVentures/xmldsigjs
A TypeScript/JavaScript implementation of XML security standards using Web Crypto API for both browsers and Node.js.
MITOct 21, 2026 · metrics 2.10.0
PyPI
asahi417/kex
Kex is a python library for unsupervised keyword extraction from a document, providing an easy interface and benchmarks on 15 public datasets.
MITOct 22, 2026 · metrics 2.10.0
—
masterfeizz/EDuke3D
Unofficial port of EDuke32 for the Nintendo 3DS
GPL-2.0Oct 20, 2026 · metrics 2.10.0
npm
mcwhittemore/staged-git-files
Node module that returns a list of files waiting to be committed.
No licenseOct 18, 2026 · metrics 2.10.0
Go
nytimes/gcs-helper
Tool for proxying and mapping HTTP requests to Google Cloud Storage (GCS).
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
amundsen-io/amundsensearchlibrary
Search service library for Amundsen
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
timoxley/wcwidth
Port of C's wcwidth() and wcswidth()
Custom licenseOct 20, 2026 · metrics 2.10.0
Hex
cyteon/discord_gleam
A library to create discord bots in gleam
MITOct 19, 2026 · metrics 2.10.0
—
fhs/ZipFile.jl
Read/Write ZIP archives in Julia
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
vadimdemedes/minimist-options
Clean and beautiful options for minimist
MITOct 21, 2026 · metrics 2.10.0
Go
vk-cs/terraform-provider-vkcs
VK Cloud terraform provider
MPL-2.0Oct 21, 2026 · metrics 2.10.0
Go · npm
JackDallas/Premiumizearr
Bridge your *Arr clients (Sonarr, Radarr) to your premiumize.me (upload/download manager)
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
calipho-sib/sequence-viewer
neXtProt protein sequence viewer (javascript) - From SIB CALIPHO group; neXtProt project
No licenseOct 22, 2026 · metrics 2.10.0
RubyGems
rubycocos/markdown
markdown tools, libraries & scripts
CC0-1.0Oct 20, 2026 · metrics 2.10.0
npm
samsonjs/format
printf-like formatting for JavaScript
MITOct 21, 2026 · metrics 2.10.0
npm
tad-lispy/node-damerau-levenshtein
Damerau - Levenstein distance function for node
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
npm
BolajiOlajide/ng-banks
Lightweight Zero dependency npm package to get list of banks in Nigeria (Recognized by CBN)
No licenseOct 22, 2026 · metrics 2.10.0
—
CTUAvastLab/JsonGrinder.jl
Machine learning with Mill.jl for JSON documents
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
JinyuanSun/DDGScan
DDGScan: an integrated parallel workflow for the in silico point mutation scan of protein
MITOct 22, 2026 · metrics 2.10.0
RubyGems
danielfriis/ruby_llm-template
Organize prompts into reusable templates for RubyLLM
MITOct 20, 2026 · metrics 2.10.0
Packagist
mageplaza/magento-2-gdpr
Magento 2 GDPR extension helps online stores which are directly affected by GDPR, Mageplaza is about to release an extension called Mageplaza GDPR for Magento 2. This module is to supports online stores to comply those data privacy regulations.
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
plumelo/rollup-plugin-styler
🎨 Universal Rollup plugin for styles: PostCSS, Sass, Less, Stylus and more.
MITOct 22, 2026 · metrics 2.10.0
npm
wooorm/trim-lines
Remove spaces and tabs around line-breaks
MITOct 19, 2026 · metrics 2.10.0