Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,115
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
mafintosh/multicast-dns
Low level multicast-dns implementation in pure javascript
MITAug 31, 2026 · metrics 2.10.0
npm
sysgears/webpack-virtual-modules
Webpack Virtual Modules is a webpack plugin that lets you create, modify, and delete in-memory files in a way that webpack treats them as if they were physically presented in the file system.
MITAug 31, 2026 · metrics 2.10.0
Maven
qtc-de/beanshooter
JMX enumeration and attacking tool.
GPL-3.0Sep 5, 2026 · metrics 2.10.0
npm
d3/d3-interpolate
Interpolate numbers, colors, strings, arrays, objects, whatever!
ISCAug 31, 2026 · metrics 2.10.0
npm
stacktracejs/error-stack-parser
Extract meaning from JS Errors
MITAug 31, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITAug 31, 2026 · metrics 2.10.0
npm
d3/d3-array
Array manipulation, ordering, searching, summarizing, etc.
ISCAug 31, 2026 · metrics 2.10.0
Go
StackExchange/wmi
WMI for Go
MITSep 6, 2026 · metrics 2.10.0
npm
tj/node-delegates
Nodejs method and accessor delegation utility
MITAug 31, 2026 · metrics 2.10.0
npm
d3/d3-color
Color spaces! RGB, HSL, Cubehelix, CIELAB, and more.
ISCAug 31, 2026 · metrics 2.10.0
npm
TooTallNate/node-bindings
Helper module for loading your native module's `.node` file
MITAug 31, 2026 · metrics 2.10.0
npm
ilammy/msvc-dev-cmd
GitHub Action to setup Developer Command Prompt for Microsoft Visual C++
MITSep 5, 2026 · metrics 2.10.0
Go
iancoleman/orderedmap
orderedmap is a golang map where the keys keep the order that they're added. It can be de/serialized from/to JSON. It's based closely on the python collections.OrderedDict.
MITSep 5, 2026 · metrics 2.10.0
npm
max-mapper/extract-zip
Zip extraction written in pure JavaScript. Extracts a zip into a directory.
BSD-2-ClauseAug 31, 2026 · metrics 2.10.0
npm
d3/d3-time-format
Parse and format times, inspired by strptime and strftime.
ISCAug 31, 2026 · metrics 2.10.0
—
allenai/openie-standalone
Quality information extraction at web scale. Edit
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
ajafff/tsutils
utility functions for working with typescript's AST
MITAug 31, 2026 · metrics 2.10.0
npm
gristlabs/ts-interface-checker
Runtime library to validate data against TypeScript interfaces.
Apache-2.0Aug 31, 2026 · metrics 2.10.0
RubyGems
langalex/couch_potato
Ruby persistence layer for CouchDB.
MITSep 3, 2026 · metrics 2.10.0
npm
domenic/opener
Opens stuff, like webpages and files and executables, cross-platform
Custom licenseAug 31, 2026 · metrics 2.10.0
Maven
NASAWorldWind/WorldWindAndroid
The NASA WorldWind Java SDK for Android (WWA) includes the library, examples and tutorials for building 3D virtual globe applications for phones and tablets.
Custom licenseSep 5, 2026 · metrics 2.10.0
Go
omegion/ssh-manager
SSH Key Manager for 1Password, Bitwarden and AWS S3.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Packagist · npm
neos/neos-ui
Neos CMS UI written in ReactJS with Immutable data structures.
GPL-3.0Sep 5, 2026 · metrics 2.10.0
npm
browserify/node-util
node.js util module as a module
MITAug 31, 2026 · metrics 2.10.0
npm
szmarczak/http2-wrapper
Use HTTP/2 the same way like HTTP/1
MITAug 31, 2026 · metrics 2.10.0
Maven
yandex/yatagan
Dependency Injection framework based on Google's Dagger2 API, optimized for fast builds and for managing large graphs with optional dependencies
Apache-2.0Sep 6, 2026 · metrics 2.10.0
PyPI
exoplanet-dev/exoplanet
Fast & scalable MCMC for all your exoplanet needs!
MITSep 6, 2026 · metrics 2.10.0
npm
d3/d3-time
A calculator for humanity’s peculiar conventions of time.
ISCAug 31, 2026 · metrics 2.10.0
npm
node-modules/address
Get current machine IP and MAC address.
Custom licenseAug 31, 2026 · metrics 2.10.0
Packagist · npm
KABBOUCHI/nova-impersonate
A Laravel Nova field allows you to authenticate as your users.
MITSep 5, 2026 · metrics 2.10.0