Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,556
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
skim-rs/fuzzy-matcher
Fuzzy Matching Library for Rust
MITAug 27, 2026 · metrics 2.10.0
crates.io
softprops/atty
are you or are you not a tty?
MITAug 11, 2026 · metrics 2.10.0
PyPI
rbarrois/python-semanticversion
Semantic version comparison for Python (see http://semver.org/)
BSD-2-ClauseAug 27, 2026 · metrics 2.10.0
Maven · npm · RubyGems
wuba/taro-playground
The Taro Playground App is a cross-platform application developed using Taro, to help developers develop and debug Taro applications.
Apache-2.0Jul 23, 2026 · metrics 2.10.0
npm
FormidableLabs/groqd
Designed to give the best GROQ developer experience possible, with the flexibility of GROQ, schema-aware auto-completion, strong type-checking, and the runtime safety of Zod.
MITJul 27, 2026 · metrics 2.10.0
Maven
diffplug/durian
Guava's spikier (unofficial) cousin
Apache-2.0Aug 21, 2026 · metrics 2.10.0
—
jenkins-x/jenkins-x-platform
Helm umbrella repo containing the helm charts for the Jenkins-X platform on Kubernetes
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
ramonhagenaars/jsons
🐍 A Python lib for (de)serializing Python objects to/from JSON
MITAug 19, 2026 · metrics 2.10.0
npm
Oksydan/falcon
Prestashop starter theme that provides great development experience.
GPL-3.0Jul 25, 2026 · metrics 2.10.0
PyPI
algorand/pyteal
Algorand Smart Contracts in Python
MITAug 11, 2026 · metrics 2.10.0
crates.io
cbreeden/fxhash
A fast, non-secure, hashing algorithm derived from an internal hasher in FireFox.
No licenseAug 11, 2026 · metrics 2.10.0
NuGet
MizunagiKB/gd_cubism
Unofficial Live2D Player for Godot Engine
Custom licenseJul 23, 2026 · metrics 2.10.0
crates.io
Byron/jwalk
Filesystem walk performed in parallel with streamed and sorted results
MITAug 6, 2026 · metrics 2.10.0
—
flyerhq/flutter_firebase_chat_core
Actively maintained, community-driven Firebase BaaS for chat applications with an optional chat UI.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
langchain-ai/langchain-community
⚠️ No longer maintained, see linked issue
MITSep 9, 2026 · metrics 2.10.0
Go
omegion/ssh-manager
SSH Key Manager for 1Password, Bitwarden and AWS S3.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
servo/cocoa-rs
DEPRECATED - Cocoa/Objective-C bindings for the Rust programming language
Custom licenseJul 19, 2026 · metrics 2.10.0
PyPI
sffjunkie/astral
Python calculations for the position of the sun and moon.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
npm
ehmicky/human-signals
Human-friendly process signals
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
recharts/react-smooth
react animation
MITAug 4, 2026 · metrics 2.10.0
NuGet
Calabonga/Microservice-Template
Templates for microservice architecture. Nimble Microservice Framework contains two modules. The first with OpenIddict and the second without OpenIddict. Templates are built on ASP.NET Core platform with different versions Core3.1, NET6, NET7 and NET8. You can create a new project extremely fast: in Visual Studio, Rider, dotnet CLI.
MITAug 4, 2026 · metrics 2.10.0
Go
pulumi/esc
Pulumi ESC is a centralized, secure service for environments, secrets, and configuration management, optimized for multi-cloud infrastructures and applications.
Apache-2.0Aug 6, 2026 · metrics 2.10.0
npm · PyPI
rzk-lang/rzk
An experimental proof assistant based on a type theory for synthetic ∞-categories.
No licenseJul 28, 2026 · metrics 2.10.0
—
Rirusha/Cassette
Read-only mirror of https://gitlab.gnome.org/Rirusha/Cassette
GPL-3.0Aug 1, 2026 · metrics 2.10.0
npm · PyPI
builder555/PineSAM
UI for Pinecil V2 - control it over BLE from your PC or your mobile.
MITJul 27, 2026 · metrics 2.10.0
npm
jonschlinkert/is-number
JavaScript/Node.js utility. Returns `true` if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.
MITAug 4, 2026 · metrics 2.10.0
PyPI
abersheeran/a2wsgi
Convert WSGI app to ASGI app or ASGI app to WSGI app.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
zertosh/loose-envify
Like envify but much faster
MITAug 4, 2026 · metrics 2.10.0
npm
then/is-promise
Test whether an object looks like a promises-a+ promise
MITAug 4, 2026 · metrics 2.10.0
—
fsharp/fsharp-compiler-docs
Doc build for FSharp.Compiler.Service
MITJul 27, 2026 · metrics 2.10.0