Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,526
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Hex
fremantle-industries/ex_bitmex
BitMEX API Client for Elixir
MITSep 15, 2026 · metrics 2.10.0
RubyGems
gamache/fuzzyurl.rb
A Ruby Gem for non-strict parsing, manipulation, and wildcard matching of URLs.
MITSep 11, 2026 · metrics 2.10.0
—
initCommerce/gato
A dart utility library inspired by javascript lodash library.
MITSep 13, 2026 · metrics 2.10.0
Maven
jakartaee/interceptors
Jakarta Interceptors
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
ljhopkins2/broadcastify-archtk
The Broadcastify Archive Toolkit for python
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
npm
micromark/micromark-extension-mdx-expression
micromark extension to support MDX or MDX JS expressions
MITOct 21, 2026 · metrics 2.10.0
PyPI
modern-python/lite-bootstrap
Lightweight bootstrap for production-ready Python microservices
MITSep 20, 2026 · metrics 2.10.0
PyPI · crates.io
monosans/mkdocs-minify-html-plugin
MkDocs plugin for minification using minify-html, an extremely fast and smart HTML + JS + CSS minifier.
MITOct 3, 2026 · metrics 2.10.0
npm
mopsicus/shardy
Framework for online games and applications on Node.js
MITOct 20, 2026 · metrics 2.10.0
Go
neputevshina/nanowarp
a high-quality audio time stretching algorithm
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
opendevtools/clearingnummer
Clearing numbers for Swedish banks
MITOct 18, 2026 · metrics 2.10.0
RubyGems
piotrmurach/benchmark-perf
Benchmark execution time and iterations per second
MITSep 11, 2026 · metrics 2.10.0
Hex
primait/opentelemetry_absinthe
No repository description published.
No licenseOct 25, 2026 · metrics 2.10.0
—
qizhoumeng/SQLReport
根据SQL自动生成报表并发送邮件
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Hex
rabbitmq/credentials-obfuscation
Tiny library/OTP app for credential obfuscation
Custom licenseOct 25, 2026 · metrics 2.10.0
npm
responsibleapi/responsible
A small language that compiles to OpenAPI
No licenseOct 26, 2026 · metrics 2.10.0
PyPI
runtimeverification/pyk
Python tools for the K Framework
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
npm
samn/json-stable-stringify
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
Custom licenseSep 16, 2026 · metrics 2.10.0
npm · Go
sb0rka/sb0rka
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
sgodwincs/dlv-list-rs
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
shish/safe
All PHP functions, rewritten to throw exceptions instead of returning false
MITSep 13, 2026 · metrics 2.10.0
crates.io
sigp/rust-libp2p
The Rust Implementation of libp2p networking stack.
MITSep 20, 2026 · metrics 2.10.0
npm
streamich/tree-dump
Simple console tree printing helpers
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-raw
utility to reparse a hast tree
MITOct 21, 2026 · metrics 2.10.0
crates.io
tormol/encode_unicode
A rust library for converting between UTF-8, UTF-16 and UTF-32 characters.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
unoplatform/Uno.UITest
Unified UI Testing Framework for Uno Platform based applications
Custom licenseSep 11, 2026 · metrics 2.10.0
Packagist
yiisoft/cache-file
Yii Cache Library - File Handler
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/mailer-symfony
Yii Framework Symfony Mailer Integration
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/translator-message-php
Yii i18n PHP message storage
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yoanm/symfony-jsonrpc-http-server
Symfony JSON-RPC HTTP Server to convert an HTTP json-rpc request into HTTP json-rpc response
MITOct 23, 2026 · metrics 2.10.0