Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,779
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
PacificBiosciences/pbbam
PacBio BAM C++ library
BSD-3-Clause-ClearSep 13, 2026 · metrics 2.10.0
—
TACC/Galaxy
Galaxy is an asynchronous parallel visualization ray tracer for performant rendering in distributed computing environments. Galaxy builds upon Intel OSPRay and Intel Embree, including ray queueing and sending logic inspired by TACC GraviT.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
aboutcode-org/pip-requirements-parser
a mostly correct pip requirements parsing library
MITOct 23, 2026 · metrics 2.10.0
Packagist
adobe/stock-api-libphp
PHP implementation of the Stock APIs
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go · npm
algonius/algonius-browser
MCP browser automation server. Exposes browser control tools to external AI systems via Model Context Protocol. Open-source & secure.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems
arthurnn/code-scanning-rubocop
No repository description published.
MITSep 12, 2026 · metrics 2.10.0
—
aws-ia/terraform-elastic-cloud
Terraform module automates Elastic Cloud deployment and optional data migration to the AWS Cloud.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Hex
binaryseed/new_relic_absinthe
Absinthe Instrumentation for the New Relic Elixir Agent
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Packagist
captainhook-git/plugin-composer
A composer-Plugin to easily use CaptainHook
MITSep 16, 2026 · metrics 2.10.0
RubyGems
cbeer/engine_cart
Rake tasks to generate test applications for Rails Engines
MITSep 12, 2026 · metrics 2.10.0
RubyGems
chatwoot/twitty
Ruby client for Twitter Business APIs
MITSep 20, 2026 · metrics 2.10.0
npm
cockroachdb/ui
Published assets for Cockroach Labs user interfaces
MITOct 26, 2026 · metrics 2.10.0
Maven
crashinvaders/gdx-lml
:octocat: LibGDX utility libraries.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
dryoma/postcss-media-query-parser
Media query parser with very simple traversing functionality.
No licenseSep 15, 2026 · metrics 2.10.0
Hex
exthereum/abi
The Ethereum ABI Interface
MITOct 25, 2026 · metrics 2.10.0
npm
findify/findify-js
Findify monorepo
No licenseSep 28, 2026 · metrics 2.10.0
npm
gl-vis/regl-scatter2d
Fast and precise scatter plot
MITOct 25, 2026 · metrics 2.10.0
Go
go-toolsmith/astcopy
Package astcopy implements Go AST deep copy operations.
MITSep 16, 2026 · metrics 2.10.0
Go
gosimple/unidecode
Unicode transliterator in Golang - Replaces non-ASCII characters with their ASCII approximations.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
hermansimensen/bash2
Bash 2.0 that works with bhoptimer
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
iarna/wide-align
No repository description published.
ISCSep 15, 2026 · metrics 2.10.0
npm
isaacs/proto-list
A list of objects bound by prototype chain
BlueOak-1.0.0Oct 20, 2026 · metrics 2.10.0
npm
istanbuljs/caching-transform
Wraps a transform and provides caching
MITSep 23, 2026 · metrics 2.10.0
npm · Go
izzzzzi/agent-assh
SSH workflow helper for LLM agents
MITSep 12, 2026 · metrics 2.10.0
npm
jonschlinkert/collection-visit
Visit a method over the items in an object, or map visit over the objects in an array. This is an alternative approach to using extend or merge, useful when events are emitted on a method like get or set.
MITSep 15, 2026 · metrics 2.10.0
npm
jonschlinkert/map-cache
Basic cache object for storing key-value pairs. Based on MapCache in Lo-dash 3.0
MITSep 15, 2026 · metrics 2.10.0
—
jow-/local-lvm-provisioner
Use local LVM for persistent storage with Kubernetes
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Hex · npm
jsonmaur/phoenix-turnstile
Use Cloudflare Turnstile in Phoenix
MITOct 25, 2026 · metrics 2.10.0
npm
karma-runner/karma-safari-launcher
A Karma plugin. Launcher for Safari.
MITOct 18, 2026 · metrics 2.10.0
npm
kuler90/activate-unity
GitHub Action to activate Unity Personal or Professional license on Ubuntu, macOS or Windows
MITOct 14, 2026 · metrics 2.10.0