Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,950
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
cannatag/ldap3
a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3
Custom licenseOct 24, 2026 · metrics 2.10.0
Maven
uber/uReplicator
Improvement of Apache Kafka Mirrormaker
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
tschaub/grunt-newer
Configure Grunt tasks to run with newer files only.
MITOct 18, 2026 · metrics 2.10.0
PyPI
google/visqol
Perceptual Quality Estimator for speech and audio
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist
Incenteev/ParameterHandler
Composer script handling your ignored parameter file
MITSep 13, 2026 · metrics 2.10.0
PyPI
mansuf/mangadex-downloader
A command-line tool to download manga from MangaDex, written in Python.
MITOct 18, 2026 · metrics 2.10.0
npm
Adamant-im/adamant
ADAMANT Blockchain Node
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
oozcitak/xmlbuilder-js
An XML builder for node.js
MITOct 21, 2026 · metrics 2.10.0
RubyGems
FortAwesome/font-awesome-sass
Font-Awesome Sass gem for use in Ruby/Rails projects
MITSep 11, 2026 · metrics 2.10.0
Go
segmentio/asm
Go library providing algorithms optimized to leverage the characteristics of modern CPUs
MIT-0Sep 14, 2026 · metrics 2.10.0
npm · PyPI
paulfitz/daff
align and compare tables
MITSep 12, 2026 · metrics 2.10.0
RubyGems
lian/bitcoin-ruby
bitcoin utils and protocol in ruby.
Custom licenseSep 11, 2026 · metrics 2.10.0
RubyGems
matthewrudy/memoist
ActiveSupport::Memoizable with a few enhancements
MITSep 11, 2026 · metrics 2.10.0
—
derric/cleanthesis
Clean Thesis is a clean, simple, and elegant LaTeX style (or template) for thesis documents.
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
replicate/replicate-python
Python client for Replicate
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
oppiliappan/eva
a calculator REPL, similar to bc(1)
MITSep 13, 2026 · metrics 2.10.0
npm
sindresorhus/object-assign
ES2015 Object.assign() ponyfill
MITSep 16, 2026 · metrics 2.10.0
npm
eslint/typescript-eslint-parser
An ESLint custom parser which leverages TypeScript ESTree to allow for ESLint to lint TypeScript source code.
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
pvorb/node-md5
a JavaScript function for hashing messages with MD5
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
Go
valyala/fasttemplate
Simple and fast template engine for Go
MITSep 12, 2026 · metrics 2.10.0
PyPI
reingart/pyfpdf
Simple PDF generation for Python (FPDF PHP port)
LGPL-3.0Oct 21, 2026 · metrics 2.10.0
RubyGems
collectiveidea/json_spec
Easily handle JSON in RSpec and Cucumber
MITSep 11, 2026 · metrics 2.10.0
crates.io
RustCrypto/password-hashes
Password hashing functions / KDFs
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITSep 16, 2026 · metrics 2.10.0
Go
grandcat/zeroconf
mDNS / DNS-SD Service Discovery in pure Go (also known as Bonjour)
Custom licenseSep 23, 2026 · metrics 2.10.0
crates.io
facebook/winterfell
A STARK prover and verifier for arbitrary computations
MITSep 14, 2026 · metrics 2.10.0
Packagist
ramsey/uuid-doctrine
❄️ 🗄️ Allow the use of a ramsey/uuid UUID as Doctrine field type.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
arches/table_print
The best data slicer! Watch a 3 minute screencast at http://tableprintgem.com
MITSep 11, 2026 · metrics 2.10.0
NuGet · npm
microsoft/botbuilder-dotnet
Welcome to the Bot Framework SDK for .NET repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using .NET.
MITSep 14, 2026 · metrics 2.10.0
Packagist
paragonie/constant_time_encoding
Constant-Time Character Encoding in PHP Projects
Custom licenseOct 24, 2026 · metrics 2.10.0