Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,671
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Hex
beam-telemetry/telemetry_poller
Periodically gather measurements and publish them as Telemetry events
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm
d3/d3-chord
Visualizations relationships or network flow with a circular layout.
ISCSep 16, 2026 · metrics 2.10.0
Hex
fogfish/datum
pure functional and generic programming for Erlang
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm
iarna/in-publish
Detect if we were run as a result of `npm publish`.
ISCOct 18, 2026 · metrics 2.10.0
Packagist
jordanbrauer/unit-converter
Convert standard units from one to another with this easy to use, lightweight package
MITOct 1, 2026 · metrics 2.10.0
npm
postcss/postcss-safe-parser
Fault tolerant CSS parser for PostCSS
MITSep 15, 2026 · metrics 2.10.0
crates.io
rust-vmm/seccompiler
This is a public archive. The code now lives in the mono-repo: https://github.com/rust-vmm/rust-vmm/
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
MetaMask/browser-passworder
A simple browserifiable module for encrypting and decrypting JSON-serializable objects with a password.
ISCSep 28, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-sort-class-members
An ESLint rule for enforcing consistent ES6 class member order
No licenseOct 24, 2026 · metrics 2.10.0
npm
colorjs/color-name
A JSON with CSS color names
MITSep 16, 2026 · metrics 2.10.0
crates.io
datenlord/s3-server
Generic S3 server implementation
MITOct 20, 2026 · metrics 2.10.0
PyPI
romis2012/python-socks
Core proxy client (SOCKS4, SOCKS5, HTTP) functionality for Python
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
sendgrid/python-http-client
Twilio SendGrid's Python HTTP Client for calling APIs
MITOct 23, 2026 · metrics 2.10.0
Packagist
webflo/drupal-finder
No repository description published.
GPL-2.0Sep 16, 2026 · metrics 2.10.0
npm
AckerApple/angular-file
Angular components for user file select, drop, and more
MITOct 22, 2026 · metrics 2.10.0
PyPI
autoprotocol/autoprotocol-python
Python library for generating Autoprotocol
Custom licenseOct 14, 2026 · metrics 2.10.0
—
googleapis/python-texttospeech
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-texttospeech
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
janosh/svelte-toc
Sticky responsive table of contents component
MITSep 16, 2026 · metrics 2.10.0
PyPI
miracle2k/python-glob2
Version of the glob module that supports recursion via **, and can capture patterns.
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
npm
pkgjs/parseargs
Polyfill of `util.parseArgs()`
MITSep 16, 2026 · metrics 2.10.0
npm
sindresorhus/function-timeout
Make a synchronous function have a timeout
MITSep 15, 2026 · metrics 2.10.0
npm
prebuild/node-gyp-build
Build tool and bindings loader for node-gyp that supports prebuilds
MITSep 15, 2026 · metrics 2.10.0
npm
theKashey/react-remove-scroll-bar
Remove document scroll bar. Nothing more
MITSep 15, 2026 · metrics 2.10.0
npm
PeculiarVentures/pkcs11js
A Node.js implementation of the PKCS#11 2.40 interface
MITOct 21, 2026 · metrics 2.10.0
RubyGems
ahoward/systemu
univeral capture of stdout and stderr and handling of child process pid for windows, *nix, etc.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
diplodoc-platform/cli
Lets make documentation on YFM
MITSep 13, 2026 · metrics 2.10.0
Hex
elixir-waffle/waffle_ecto
Waffle.Ecto provides an integration with Waffle and Ecto
No licenseOct 19, 2026 · metrics 2.10.0
npm
estools/esutils
utility box for ECMAScript language tools
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
irgeek/StrEnum
A Python Enum that inherits from str.
MITSep 10, 2026 · metrics 2.10.0
PyPI
kyrus/python-junit-xml
A Python module for creating JUnit XML test result documents that can be read by tools such as Jenkins. If you are ever working with test tool or test suite written in Python and want to take advantage of Jenkins' pretty graphs and test reporting capabilities, this module will let you generate the XML test reports.
MITOct 24, 2026 · metrics 2.10.0