Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,390
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
modern-python/faststream-concurrent-aiokafka
Concurrent message-processing middleware for FastStream + aiokafka
MITOct 22, 2026 · metrics 2.10.0
—
natural-transformation/spoonbill
A server-side single-page application framework for Scala — build reactive web apps with no JavaScript (formerly Korolev)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
oberlevd/platform-lib
No repository description published.
No licenseOct 19, 2026 · metrics 2.10.0
Go
opentable/go-singularity
Singularity API client
MITOct 20, 2026 · metrics 2.10.0
crates.io · PyPI
paiml/trueno-graph
MOVED → https://github.com/paiml/aprender (crates/aprender-graph)
MITOct 21, 2026 · metrics 2.10.0
crates.io
paiml/trueno-rag
MOVED → https://github.com/paiml/aprender (crates/aprender-rag)
MITOct 21, 2026 · metrics 2.10.0
PyPI
pierrepo/autoclasswrapper
AutoClassWrapper: a Python :snake: wrapper for AutoClass C classification :package: :rocket:
BSD-3-ClauseOct 18, 2026 · metrics 2.10.0
Packagist
pimcore/quill-bundle
Quill WYSIWYG Editor integration for Pimcore
Custom licenseOct 22, 2026 · metrics 2.10.0
crates.io
sp1-patches/bn
Pairing cryptography library in Rust
Apache-2.0Oct 17, 2026 · metrics 2.10.0
npm
sparcs-kaist/react-grid-layout
react-grid-layout customization for usage in ZABO
MITOct 22, 2026 · metrics 2.10.0
PyPI
ssst0n3/opdb
an opcode level debugger for python
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
syntax-tree/estree-util-is-identifier-name
Check if something can be an ecmascript (javascript) identifier name
MITOct 20, 2026 · metrics 2.10.0
crates.io
theseus-os/wasmtime
(Ported to Theseus) Standalone JIT-style runtime for WebAssembly, using Cranelift
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
tyler-technologies-oss/forge-react
An adapter library for using Forge components in an React application.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
vmkteam/topsrv
No repository description published.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Hex
vshakitskiy/websocks
🧦 WebSocket protocol in Gleam
Apache-2.0Oct 22, 2026 · metrics 2.10.0
crates.io
weso/pgschemapc
Property graph schemas with Property constraints
MITOct 22, 2026 · metrics 2.10.0
PyPI
whole-tale/girder_wholetale
Girder plugin providing basic Whole Tale functionality
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
—
xdg/scram
Legacy scram library → use xdg-go/scram instead
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
AdminBenni/iota-mixing
Linter which checks for mixing unrelated consts with iota-s in the same const block.
MITOct 21, 2026 · metrics 2.10.0
Go
ArtisanCloud/PowerSocialite
No repository description published.
No licenseOct 18, 2026 · metrics 2.10.0
npm
BluMintInc/eslint-custom-rules
Custom rules for use in BluMint repositories.
No licenseOct 20, 2026 · metrics 2.10.0
PyPI
ElsevierSoftwareX/SOFTX-D-20-00001
Microstructure modeling, mesh generation, analysis, and visualization. To cite this software publication: https://www.sciencedirect.com/science/article/pii/S2352711020303083
MITOct 21, 2026 · metrics 2.10.0
NuGet
FontStashSharp/FontStashSharp.Base
Base Interfaces for FontStashSharp
ZlibOct 21, 2026 · metrics 2.10.0
Maven
Hccake/ballcat
😸一个快速开发脚手架，快速搭建企业级后台管理系统，并提供多种便捷starter进行功能扩展。主要功能包括前后台用户分离，菜单权限，数据权限，定时任务，访问日志，操作日志，异常日志，统一异常处理，XSS过滤，SQL防注入，国际化 等多种功能
MITOct 20, 2026 · metrics 2.10.0
Go
Klarrio/kafka-proxy
Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
LF-Engineering/aws-lambda-go-api-proxy
lambda-go-api-proxy makes it easy to port APIs written with Go frameworks such as Gin (https://gin-gonic.github.io/gin/ ) to AWS Lambda and Amazon API Gateway.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
OpenTTD/py-protocol
OpenTTD's wire protocol as Python library
LGPL-2.1Oct 18, 2026 · metrics 2.10.0
npm
QwantResearch/webrtc-swarm
Create a swarm of p2p connections using webrtc and a signalhub
MITOct 18, 2026 · metrics 2.10.0
—
SwissDataScienceCenter/renku-search
No repository description published.
Apache-2.0Oct 19, 2026 · metrics 2.10.0