Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,545
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
audiojs/decode
Minimal audio decoders layer
MITSep 9, 2026 · metrics 2.10.0
Packagist
basis-company/nats.php
nats jetstream client for php
No licenseJul 29, 2026 · metrics 2.10.0
npm
d3/d3-axis
Human-readable reference marks for scales.
ISCAug 4, 2026 · metrics 2.10.0
Go
tommy-muehle/go-mnd
Magic number detector for Go.
MITAug 4, 2026 · metrics 2.10.0
crates.io
yury/cidre
Apple frameworks bindings for rust
MITJul 20, 2026 · metrics 2.10.0
Packagist
andreyryabin/sprint.migration
Миграции для разработчиков (1С-Битрикс)
MITJul 21, 2026 · metrics 2.10.0
RubyGems
ianwhite/orm_adapter
Provides a single point of entry for using basic features of ruby ORMs
MITJul 22, 2026 · metrics 2.10.0
npm
jonschlinkert/word-wrap
Wrap words to a specified length.
MITAug 4, 2026 · metrics 2.10.0
—
mmahnic/argumentum
C++ command line parsing library
MPL-2.0Jul 25, 2026 · metrics 2.10.0
Go
natefinch/atomic
atomic is a go package for atomic file writing
MITAug 29, 2026 · metrics 2.10.0
npm
ai/multiocular
ꙮ Review dependencies changes to prevent supply chain attack
MITJul 24, 2026 · metrics 2.10.0
PyPI
kennethreitz-archive/args
Argument Parsing for Humans™
BSD-2-ClauseJul 30, 2026 · metrics 2.10.0
RubyGems
socketry/async-io
Concurrent wrappers for native Ruby IO & Sockets.
MITJul 20, 2026 · metrics 2.10.0
crates.io
AltF02/x11-rs
Rust bindings for X11 libraries
MITAug 11, 2026 · metrics 2.10.0
npm
broofa/node-int64
Support for representing 64-bit integers in JavaScript
MITAug 4, 2026 · metrics 2.10.0
NuGet
force-net/Crc32.NET
Fast version of Crc32 algorithm for .NET
MITJul 28, 2026 · metrics 2.10.0
Packagist
glushkovds/phpclickhouse-laravel
Adapter of the most popular library https://github.com/smi2/phpClickHouse to Laravel
MITAug 19, 2026 · metrics 2.10.0
npm
hoiheart/vue-diff
VueJS diff viewer plugin
MITJul 17, 2026 · metrics 2.10.0
PyPI
django-ldapdb/django-ldapdb
django-ldapdb, an LDAP database backend for Django
BSD-2-ClauseSep 8, 2026 · metrics 2.10.0
crates.io
dtolnay/proc-macro-hack
Procedural macros in expression position
Apache-2.0Aug 13, 2026 · metrics 2.10.0
crates.io
interledger/interledger-rs
An easy-to-use, high-performance Interledger implementation written in Rust
Custom licenseAug 14, 2026 · metrics 2.10.0
—
thecodingmachine/kickoff-docker-php
:whale: :elephant: :rocket: Easily setup a PHP project with Docker
MITJul 21, 2026 · metrics 2.10.0
RubyGems
documentcloud/closure-compiler
A Ruby Wrapper for the Google Closure Compiler
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-debug
Debug Extension for Yii 2
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
—
Arsunt/TR2Main
Tomb Raider II Injector Dynamic Library
GPL-3.0Jul 28, 2026 · metrics 2.10.0
Go
OpenPeeDeeP/depguard
Go linter that checks if package imports are in a list of acceptable packages.
GPL-3.0Aug 4, 2026 · metrics 2.10.0
Go
adikari/monorepo-diff-buildkite-plugin
Run separate pipelines for each folder in your monorepo
MITJul 23, 2026 · metrics 2.10.0
RubyGems
benalavi/waveform
Generate waveform images from audio files
No licenseJul 22, 2026 · metrics 2.10.0
Go
bnb-chain/go-sdk
No repository description published.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
RubyGems
gshutler/useragent
HTTP User Agent parser
MITSep 9, 2026 · metrics 2.10.0