Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,285
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
abbot/go-http-auth
Basic and Digest HTTP Authentication for golang http
Apache-2.0Oct 21, 2026 · metrics 2.10.0
crates.io
bodil/smartstring
Compact inlined strings for Rust.
MPL-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
cdown/srt
A simple library and set of tools for parsing, modifying, and composing SRT files.
MITOct 19, 2026 · metrics 2.10.0
PyPI
NVlabs/timeloop
Timeloop performs modeling, mapping and code-generation for tensor algebra workloads on various accelerator architectures.
BSD-3-ClauseOct 22, 2026 · metrics 2.10.0
npm
koichik/node-tunnel
Node HTTP/HTTPS Agents for tunneling proxies
MITOct 21, 2026 · metrics 2.10.0
npm
mafintosh/multicast-dns
Low level multicast-dns implementation in pure javascript
MITOct 21, 2026 · metrics 2.10.0
—
rsc/pdf
PDF reader
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-rust
Rust grammar for tree-sitter
MITOct 21, 2026 · metrics 2.10.0
npm
kriszyp/json-schema
JSON Schema specifications, reference schemas, and a CommonJS implementation
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
vernette/warpscout
🛰️ Cloudflare WARP endpoint scanner - find working endpoints over wg/awg/masque and see the exit region and edge node they land on
MITOct 18, 2026 · metrics 2.10.0
PyPI
fabfuel/circuitbreaker
Python "Circuit Breaker" implementation
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
sysgears/webpack-virtual-modules
Webpack Virtual Modules is a webpack plugin that lets you create, modify, and delete in-memory files in a way that webpack treats them as if they were physically presented in the file system.
MITOct 21, 2026 · metrics 2.10.0
Maven
qtc-de/beanshooter
JMX enumeration and attacking tool.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
Go
nikepan/clickhouse-bulk
Collects many small inserts to ClickHouse and send in big inserts
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
Shopify/theme-scripts
Theme Scripts is a collection of utility libraries which help theme developers with problems unique to Shopify Themes.
MITOct 19, 2026 · metrics 2.10.0
npm
mathiasbynens/CSS.escape
A robust polyfill for the CSS.escape utility method as defined in CSSOM.
MITOct 20, 2026 · metrics 2.10.0
npm
d3/d3-interpolate
Interpolate numbers, colors, strings, arrays, objects, whatever!
ISCOct 21, 2026 · metrics 2.10.0
PyPI · RubyGems
evangelosmeklis/peepdb
CLI tool and python library to inspect databases fast.
GPL-3.0Oct 22, 2026 · metrics 2.10.0
npm
stacktracejs/error-stack-parser
Extract meaning from JS Errors
MITOct 21, 2026 · metrics 2.10.0
—
btcsuite/btcutil
Provides bitcoin-specific convenience functions and types
No licenseOct 18, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITOct 21, 2026 · metrics 2.10.0
—
avishorp/TM1637
Arduino library for TM1637 (LED Driver)
LGPL-3.0Oct 20, 2026 · metrics 2.10.0
crates.io
rust-vmm/vm-virtio
This is a public archive. The code now lives in the mono-repo: https://github.com/rust-vmm/rust-vmm/
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
Omnistac/zedux
:zap: A Molecular State Engine for React
MITOct 21, 2026 · metrics 2.10.0
PyPI · Maven
grpc-ecosystem/grpc-opentracing
OpenTracing is a set of consistent, expressive, vendor-neutral APIs for distributed tracing and context propagation
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Go
deckhouse/prompp
Deckhouse Prom++ – high-performance fork of Prometheus, designed to significantly reduce memory consumption
Custom licenseOct 18, 2026 · metrics 2.10.0
Maven
LatencyUtils/LatencyUtils
Utilities for latency measurement and reporting
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
d3/d3-array
Array manipulation, ordering, searching, summarizing, etc.
ISCOct 21, 2026 · metrics 2.10.0
—
dotnet/core-setup
Installer packages for the .NET Core runtime and libraries
No licenseOct 20, 2026 · metrics 2.10.0
Maven
restx/restx
RESTX, the lightweight Java REST framework
Custom licenseOct 19, 2026 · metrics 2.10.0