Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,330
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
polyfloyd/rust-id3
Moved to https://codeberg.org/polyfloyd/rust-id3
MITSep 20, 2026 · metrics 2.10.0
Go
yandex-cloud/terraform-provider-yandex
Terraform Yandex provider
MPL-2.0Sep 12, 2026 · metrics 2.10.0
—
timescale/helm-charts
Configuration and Documentation to run TimescaleDB in your Kubernetes cluster
Apache-2.0Sep 13, 2026 · metrics 2.10.0
—
aymerick/douceur
A simple CSS parser and inliner in Go
MITSep 14, 2026 · metrics 2.10.0
RubyGems
banditcpp/bandit
Human-friendly unit testing for C++11
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
octokit/webhooks
machine-readable, always up-to-date GitHub Webhooks specifications
MITSep 16, 2026 · metrics 2.10.0
Maven
os72/protoc-jar-maven-plugin
Protocol Buffers protobuf maven plugin - based on protoc-jar multi-platform executable protoc JAR
Apache-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
rubocop/guard-rubocop
Guard plugin for RuboCop
MITSep 11, 2026 · metrics 2.10.0
RubyGems · npm
ruby-grape/grape-swagger-rails
Swagger UI as Rails Engine for grape-swagger gem.
MITSep 12, 2026 · metrics 2.10.0
Go
tendermint/go-amino
Protobuf3 with Interface support - Designed for blockchains (deterministic, upgradeable, fast, and compact)
Custom licenseSep 23, 2026 · metrics 2.10.0
crates.io
tokio-rs/tls
A collection of Tokio based TLS libraries.
MITSep 17, 2026 · metrics 2.10.0
npm
unjs/uncrypto
Single API for Web Crypto API and Crypto Subtle working in Node.js, Browsers and other runtimes
MITSep 23, 2026 · metrics 2.10.0
npm
kornelski/http-cache-semantics
RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
crates.io · npm
lanyeeee/hitomi-downloader
A GUI-based multi-threaded downloader for hitomi hitomi.la 一个带GUI的用于 hitomi hitomi.la 的多线程下载器
MITSep 10, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-apidoc
API documentation generator
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
PyPI
AzureAD/azure-activedirectory-library-for-python
ADAL for Python
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
baverman/flameprof
Flamegraph generator for cProfile stats
MITSep 12, 2026 · metrics 2.10.0
PyPI
dapper91/pydantic-xml
python xml for humans
UnlicenseOct 18, 2026 · metrics 2.10.0
Maven
javaee/servlet-spec
The API and Issue Tracker for the JCP Standard Java Servlet Specification
Custom licenseSep 14, 2026 · metrics 2.10.0
RubyGems
railsware/rack_session_access
Rack middleware that provides access to rack.session environment
MITOct 20, 2026 · metrics 2.10.0
Go
remind101/ssm-env
Expand env variables from AWS Parameter Store
BSD-2-ClauseOct 18, 2026 · metrics 2.10.0
npm
ajv-validator/ajv-keywords
Additional JSON-Schema keywords for Ajv JSON validator
MITSep 13, 2026 · metrics 2.10.0
—
d4l3k/messagediff
A library for doing diffs of arbitrary Golang structs.
MITSep 11, 2026 · metrics 2.10.0
PyPI
matthewgilbert/pdblp
pandas wrapper for Bloomberg Open API
MITOct 22, 2026 · metrics 2.10.0
PyPI
schodet/nxt-python
NXT-Python is a python driver/interface for the Lego Mindstorms NXT robot based on NXT_python.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Packagist
webmozarts/glob
A PHP implementation of Ant's glob.
MITSep 13, 2026 · metrics 2.10.0
npm
dcos/dcos-ui
The UI for The Datacenter Operating System
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
moq/moq.spikes
The most popular and friendly mocking framework for .NET
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
evfro/polara
Recommender system and evaluation framework for top-n recommendations tasks that respects polarity of feedbacks. Fast, flexible and easy to use. Written in python, boosted by scientific python stack.
MITSep 14, 2026 · metrics 2.10.0
—
orange-cpp/omath
Cross-platform modern general purpose game/mods/cheats development framework written in C++23.
ZlibSep 12, 2026 · metrics 2.10.0