Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,446
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
648B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
zephyrproject-rtos/python-devicetree
Python devicetree library
No licenseOct 18, 2026 · metrics 2.10.0
NuGet
JeremyVm/QuestPDF.HTML
HTMLToQPDF is an extension for QuestPDF that allows to generate PDF from HTML
MITOct 21, 2026 · metrics 2.10.0
npm
andrewrk/node-pend
dead-simple optimistic async helper in javascript
MITOct 20, 2026 · metrics 2.10.0
Go
counterapi/api
Counter Go application
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Maven
eclipse-ee4j/expressly
Expressly, a Jakarta Expression Language implementation
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
executablebooks/mdurl
URL utilities for markdown-it (a Python port)
Custom licenseOct 23, 2026 · metrics 2.10.0
Packagist
pantheon-systems/pantheon-mu-plugin
Pantheon's WordPress mu-plugin for all WordPress-based upstreams.
MITOct 20, 2026 · metrics 2.10.0
Packagist
phptek/silverstripe-sentry
Flexible Sentry compatible bug aggregation client for Silverstripe applications.
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go
quasilyte/regex
Regular expression libraries for Go
MITOct 21, 2026 · metrics 2.10.0
npm
robertd/cdk-karpenter
AWS CDK Construct for installing Karpenter on top of an EKS cluster.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
zeta-group/ZDCode
The language that compiles to ye olde DECORATE!
MITOct 19, 2026 · metrics 2.10.0
Go
Galaco/lambda-core
Set of core utilities for Source Engine tool development, written in Go
UnlicenseOct 18, 2026 · metrics 2.10.0
—
buildkite/test-collector-javascript
Moved to buildkite/bktest — Buildkite Test Engine collectors for JavaScript test frameworks
No licenseOct 17, 2026 · metrics 2.10.0
—
crocs-muni/CryptoStreams
Tool for generation of data from cryptoprimitives (block and stream ciphers, hash functions). Cryptoprimitives are round-reduced and the data can be configured for multiple testing scenarios.
MITOct 21, 2026 · metrics 2.10.0
npm
k4m4/esolangs
Detect and execute esoteric programming language code.
MITOct 19, 2026 · metrics 2.10.0
npm
masihgh/iranian-bank-list-js
A Javascript library to identify Iranian banks based on card numbers (first 6 digits) and IBANs. It also includes utility functions to validate card numbers and IBANs using standard algorithms.
MITOct 18, 2026 · metrics 2.10.0
Packagist
oroinc/customer-portal
OroCommerce package with customer portal and non authenticated visitor website base features.
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
pulp/pulp_file
A Pulp plugin that manages File content, e.g. repositories of file content.
GPL-2.0Oct 22, 2026 · metrics 2.10.0
npm
salesforce/buffer-equal-constant-time
Constant-time Buffer Equality
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
—
sbt/test-interface
Uniform test interface to Scala test frameworks (specs, ScalaCheck, ScalaTest)
Custom licenseOct 19, 2026 · metrics 2.10.0
Packagist
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
MITOct 20, 2026 · metrics 2.10.0
Go
txix-open/isp-kit
No repository description published.
MITOct 21, 2026 · metrics 2.10.0
npm
vfile/vfile-location
utility to convert between positional (line and column-based) and offset (range-based) locations
MITOct 21, 2026 · metrics 2.10.0
—
JuliaWeb/HttpParser.jl
Deprecated! Julia wrapper for joyent/http-parser
MITOct 22, 2026 · metrics 2.10.0
crates.io
Lol3rrr/nomad-runner
A Nomad Runner for Gitlab CI
MITOct 19, 2026 · metrics 2.10.0
npm
MetaMask/smart-transactions-controller
No repository description published.
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
MoseleyBioinformaticsLab/pdb_eda
A Python tool for parsing and analyzing electron density maps data available from the worldwide Protein Data Bank
Custom licenseOct 22, 2026 · metrics 2.10.0
Packagist
Sylius/SyliusShippingBundle
[READ-ONLY] Shipments, shipping methods and categories management for Symfony2.
MITOct 21, 2026 · metrics 2.10.0
Packagist
aplus-framework/log
Aplus Framework Log Library
MITOct 18, 2026 · metrics 2.10.0
Go
cdktf/cdktf-provider-aws-go
CDK for Terraform Go provider bindings for aws.
MPL-2.0Oct 21, 2026 · metrics 2.10.0