Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
578B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
yiisoft/mailer
Generic mailer
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/router-fastroute
Yii Router FastRoute adapter
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
PyPI
SyntaxArc/ArchiPy
Architecture + Python – perfect for structured design.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Packagist
amphp/log
Non-blocking logging for PHP based on Amp and Monolog.
MITAug 13, 2026 · metrics 2.10.0
Go · npm
cloudfoundry/service-fabrik-broker
Cloud Foundry service broker which provisions service instances as Docker containers and BOSH deployments.
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Go
fhs/go-netcdf
Go binding for the netCDF C library.
MITJul 30, 2026 · metrics 2.10.0
npm
gammasoft/ie
Biblioteca de validação de inscrições estaduais em JavaScript (browser e node.js)
No licenseJul 28, 2026 · metrics 2.10.0
Go
go-simpler/musttag
🚔 Enforce field tags in (un)marshaled structs
MPL-2.0Aug 29, 2026 · metrics 2.10.0
npm
kfastov/tgcli
Telegram user console client and archiver
MITJul 28, 2026 · metrics 2.10.0
PyPI
mcfletch/pydispatcher
Observable signal implementation for python
Custom licenseAug 24, 2026 · metrics 2.10.0
Packagist
unitpay/unitpay-php
PHP SDK for Unitpay API https://help.unitpay.ru
MITJul 25, 2026 · metrics 2.10.0
Hex
xward/phoenix_ddos
ddos protection for elixir phoenix project
Apache-2.0Aug 1, 2026 · metrics 2.10.0
npm
zhs007/getcomic
getcomic - 漫画打包器
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Maven
BMDSoftware/neji
Flexible and powerful platform for biomedical information extraction from text
No licenseAug 1, 2026 · metrics 2.10.0
crates.io
Isaac-Lozano/radx
An ADX encoder/decoder written in Rust.
MITAug 21, 2026 · metrics 2.10.0
Packagist
blancks/fast-jsonpatch-php
Class designed to handle JSON Patch operations in accordance with the RFC 6902 specification
MITSep 8, 2026 · metrics 2.10.0
RubyGems
coderanger/rspec-command
rspec-command is a helper module for using RSpec to test command-line applications.
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
dfm/kplr
Tools for working with Kepler data using Python
MITSep 6, 2026 · metrics 2.10.0
Maven
ethlo/itu
An extremely fast parser and formatter of standardized date and date-times supporting RFC-3339 (ISO-8601 profile) and more.
Apache-2.0Aug 21, 2026 · metrics 2.10.0
Maven
freshollie/monkeyboard-radio-android
Monkeyboard - FM & DAB/DAB+ radio for android
GPL-3.0Aug 4, 2026 · metrics 2.10.0
PyPI
gsnedders/python-webencodings
Character encoding for the web.
Custom licenseSep 9, 2026 · metrics 2.10.0
npm
mediachain/aleph
א: The mediachain universe manipulation engine
MITJul 21, 2026 · metrics 2.10.0
PyPI
microsoft/jschema-to-python
Generate source code for a set of Python classes from a JSON schema.
MITAug 19, 2026 · metrics 2.10.0
Packagist
symplify/phpstan-extensions
'ignore' error format, solid Symfony SplFileInfo and other useful extensions for PHPStan
MITJul 22, 2026 · metrics 2.10.0
PyPI
thobbs/pure-sasl
A pure python SASL client
MITAug 22, 2026 · metrics 2.10.0
npm
yargs/set-blocking
set blocking stdio and stderr ensuring that terminal output does not truncate
ISCAug 4, 2026 · metrics 2.10.0
npm · RubyGems
18F/federalist-uswds-jekyll
Reference implementation of USWDS 2.0 for Jekyll on Cloud.gov. Demo ->
Custom licenseJul 18, 2026 · metrics 2.10.0
Packagist
PrestaShop/circuit-breaker
A resilient PHP library that allows to safely make calls to external services
MITJul 25, 2026 · metrics 2.10.0
Go
ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
MITAug 4, 2026 · metrics 2.10.0
Hex
dashbitco/nimble_strftime
A simple and fast strftime-based datetime formatter
No licenseJul 18, 2026 · metrics 2.10.0