Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,121
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
NullHypothesis/exitmap
A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at https://gitlab.torproject.org/tpo/network-health/exitmap
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
AI-Hypercomputer/JetStream
JetStream is a throughput and memory optimized engine for LLM inference on XLA devices, starting with TPUs (and GPUs in future -- PRs welcome).
Apache-2.0Sep 10, 2026 · metrics 2.10.0
RubyGems
joshbuddy/jsonpath
Ruby implementation of http://goessner.net/articles/JsonPath/
MITSep 12, 2026 · metrics 2.10.0
PyPI
vgalin/html2image
A package acting as a wrapper around the headless mode of existing web browsers to generate images from URLs and from HTML+CSS strings or files.
MITSep 12, 2026 · metrics 2.10.0
npm
AztecProtocol/aztec-connect
aztec connect repository
MITSep 13, 2026 · metrics 2.10.0
—
rackspace/gophercloud
A Go SDK for OpenStack. IN FEATURE FREEZE. See Issue #592
Custom licenseSep 14, 2026 · metrics 2.10.0
Hex
safwank/ElixirRetry
Simple Elixir macros for linear retry, exponential backoff and wait with composable delays
Custom licenseSep 9, 2026 · metrics 2.10.0
PyPI
darrenburns/pytest-clarity
A plugin to improve the output of pytest with colourful unified diffs
MITSep 12, 2026 · metrics 2.10.0
npm
doowb/ansi-colors
Easily add ANSI colors to your text and symbols in the terminal. ansi-colors is the official ansi styling library for gulp. Used by hundreds of projects, including enquirer, vscode, codeql, azure data studio, aws-cdk, redwoodjs, leaflet, mocha, and many others.
MITSep 16, 2026 · metrics 2.10.0
—
dotnet/core-setup
Installer packages for the .NET Core runtime and libraries
No licenseOct 20, 2026 · metrics 2.10.0
—
ruzickap/packer-templates
Scripts and Templates used for generating Vagrant images
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
s-yadav/iv-viewer
A zooming and panning plugin inspired by google photos for your web images.
MITSep 9, 2026 · metrics 2.10.0
RubyGems
bebanjo/delorean
DISCONTINUED - Delorean lets you travel in time with Ruby by mocking Time.now
MITSep 12, 2026 · metrics 2.10.0
crates.io
lurk-lab/lurk-beta
Lurk is a Turing-complete programming language for recursive zk-SNARKs. This is the prior, elliptic curve based variant of Lurk (contact: @porcuquine)
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
python-babel/flask-babel
i18n and l10n support for Flask based on Babel and pytz
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
MITSep 13, 2026 · metrics 2.10.0
npm
bruce/node-temp
Temporary File, Directory, and Stream support for Node.js
MITOct 23, 2026 · metrics 2.10.0
Hex
edgurgel/tentacat
Simple Elixir wrapper for the GitHub API
MITSep 9, 2026 · metrics 2.10.0
npm
bem/bem-react
A set of tools for developing user interfaces using the BEM methodology in React
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
facebookincubator/infima
A UI framework that provides websites with the minimal CSS and JS needed to get started with building a modern responsive beautiful website
MITSep 23, 2026 · metrics 2.10.0
crates.io
ZettaScaleLabs/stabby
A Stable ABI for Rust with compact sum-types
Custom licenseSep 12, 2026 · metrics 2.10.0
Maven
restx/restx
RESTX, the lightweight Java REST framework
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
devbookhq/splitter
React component for building split views like in VS Code
MITSep 13, 2026 · metrics 2.10.0
—
andrewjlamarche/PSKracker
An all-in-one WPA/WPS toolkit
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
bytedance/matxscript
A high-performance, extensible Python AOT compiler.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
d2iq-archive/marathon-lb
Marathon-lb is a service discovery & load balancing tool for DC/OS
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
goreleaser/godownloader
[DEPRECATED] Download Go binaries as fast and easily as possible.
MITSep 14, 2026 · metrics 2.10.0
—
pwnnex/ByeByeVPN
Full TSPU/DPI/VPN detectability scanner. Scan any IP as a censor sees it.
GPL-3.0Oct 13, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-redis
Yii 2 Redis extension.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
d3/d3-dsv
A parser and formatter for delimiter-separated values, such as CSV and TSV.
ISCSep 15, 2026 · metrics 2.10.0