Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,928
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
estools/estraverse
ECMAScript JS AST traversal functions
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
NuGet
VahidN/EFCoreSecondLevelCacheInterceptor
EF Core Second Level Cache Interceptor
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
savoirfairelinux/num2words
Modules to convert numbers to words. 42 --> forty-two
LGPL-2.1Sep 12, 2026 · metrics 2.10.0
Packagist
PHP-CS-Fixer/diff
Diff implementation
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
RubyGems
yabeda-rb/yabeda
Extendable framework for collecting and exporting metrics from your Ruby application
MITOct 20, 2026 · metrics 2.10.0
Maven
moai/moai-dev
This is the development repo of Moai SDK.
No licenseSep 12, 2026 · metrics 2.10.0
RubyGems
thekompanee/fuubar
The instafailing RSpec progress bar formatter
MITSep 11, 2026 · metrics 2.10.0
Go
docker-archive/compose-cli
Easily run your Compose application to the cloud with compose-cli
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
GarrettGunnell/Acerola-Compute
A compute shader wrapper for Godot
MITSep 12, 2026 · metrics 2.10.0
crates.io
RustCrypto/AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
rockchip-linux/rknn-toolkit
No repository description published.
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
pydantic/pydantic-ai-harness
Batteries for your Pydantic AI agent.
MITOct 24, 2026 · metrics 2.10.0
npm
Shopify/shopify-api-js
Shopify Admin API Library for Node. Accelerate development with support for authentication, graphql proxy, webhooks
MITSep 20, 2026 · metrics 2.10.0
Go
posener/complete
bash completion written in go + bash completion for go command
MITSep 14, 2026 · metrics 2.10.0
npm
noolsjs/nools
Rete based rules engine written in javascript
MITSep 13, 2026 · metrics 2.10.0
RubyGems
rack/rack-test
Rack::Test is a small, simple testing API for Rack apps.
MITSep 12, 2026 · metrics 2.10.0
PyPI · npm
djlint/djLint
HTML template formatter and linter for Django, Jinja, Twig, Nunjucks, Handlebars, Liquid, Go templates, Mustache, Tera, Askama and Angular. Formats markup and template syntax together, and lints for accessibility, correctness and style. CLI, pre-commit hook and VS Code extension.
GPL-3.0Oct 24, 2026 · metrics 2.10.0
—
Lora-net/lora_gateway
Driver/HAL to build a gateway using a concentrator board based on Semtech SX1301 multi-channel modem and SX1257/SX1255 RF transceivers.
Custom licenseOct 18, 2026 · metrics 2.10.0
Maven
dom4j/dom4j
flexible XML framework for Java
Custom licenseSep 14, 2026 · metrics 2.10.0
—
loresoft/msbuildtasks
The MSBuild Community Tasks Project is an open source project for MSBuild tasks.
BSD-2-ClauseSep 11, 2026 · metrics 2.10.0
Packagist
shetabit/payment
simple laravel payment package , supports multiple drivers
MITSep 15, 2026 · metrics 2.10.0
npm
tracespace/tracespace
⚡️generate beautiful and accurate SVG renders of printed circuit boards
MITSep 13, 2026 · metrics 2.10.0
RubyGems
weppos/breadcrumbs_on_rails
A simple Ruby on Rails plugin for creating and managing a breadcrumb navigation.
MITSep 12, 2026 · metrics 2.10.0
—
w9jds/firebase-action
GitHub Action for interacting with Firebase
MITSep 11, 2026 · metrics 2.10.0
—
canonical/raft
Unmaintained C implementation of the Raft consensus protocol
Custom licenseOct 22, 2026 · metrics 2.10.0
RubyGems
rails/jquery-rails
A gem to automate using jQuery with Rails
MITSep 12, 2026 · metrics 2.10.0
npm
d3/d3-sankey
Visualize flow between nodes in a directed acyclic network.
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
npm
expo/google-fonts
Use any of the 1000+ fonts (and their variants) from fonts.google.com in your Expo app.
MITSep 10, 2026 · metrics 2.10.0
Maven · Go · npm
operator-framework/java-operator-sdk
Java SDK for building Kubernetes Operators
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Maven
uniVocity/univocity-parsers
uniVocity-parsers is a suite of extremely fast and reliable parsers for Java. It provides a consistent interface for handling different file formats, and a solid framework for the development of new parsers.
Custom licenseOct 19, 2026 · metrics 2.10.0