Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,403
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
yargs/require-main-filename
shim for require.main.filename() that works in as many environments as possible
ISCOct 20, 2026 · metrics 2.10.0
PyPI
Azure/msrestazure-for-python
The runtime library "msrestazure" for AutoRest generated Python clients.
MITSep 12, 2026 · metrics 2.10.0
Go
DE-labtory/bifrost
P2P network library suppoting it-chain 📨
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
EVerest/libslac
Simple ISO15118-3 SLAC implementation
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
Finschia/iavl
Merkleized IAVL+ Tree implementation in Go forked from cosmos/iavl(https://github.com/cosmos/iavl)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · npm
GrinZero/dpdm-fast
Detect circular dependencies in your TypeScript projects with `Rust`.
MITOct 20, 2026 · metrics 2.10.0
Packagist
Guzzle3/stream
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Stream component
No licenseSep 13, 2026 · metrics 2.10.0
Go
NubeDev/bacnet
No repository description published.
GPL-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
PavanTatikonda/itypes
Basic immutable container types for Python.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
SurveyMonkey/graphql-ergonomock
Automatic mocking of GraphQL queries
MITSep 27, 2026 · metrics 2.10.0
Go
Zondax/ledger-go
Go package to connect to Ledger devices
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Packagist
alexkart/curl-builder
Curl command generator library
MITSep 14, 2026 · metrics 2.10.0
Go
alingse/asasalint
Golang linter, lint pass any slice as any in variadic function
MITSep 16, 2026 · metrics 2.10.0
npm
aurelia/pal
Aurelia's Platform Abstraction Layer
MITOct 19, 2026 · metrics 2.10.0
npm
bendrucker/builtin-status-codes
The map of HTTP status codes from the builtin http module
MITSep 15, 2026 · metrics 2.10.0
Go
binbandit/sage
Burning away Git complexity
MITOct 19, 2026 · metrics 2.10.0
PyPI
brettcannon/modutil
A library for working with Python modules
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
No licenseOct 22, 2026 · metrics 2.10.0
crates.io
datafuse-extras/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
datawire/teleproxy
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
npm
ealush/flairup
🎩 CSS-In-JS Library for package authors
MITOct 16, 2026 · metrics 2.10.0
—
emilopezcano/SixSigma
SixSigma R package
No licenseSep 16, 2026 · metrics 2.10.0
RubyGems
etscrivner/rbsecp256k1
Compiled Ruby wrapper around libsecp256k1 for secp256k1 ECDSA.
UnlicenseSep 11, 2026 · metrics 2.10.0
RubyGems
hardpixel/unaccent
Replace a string's accent characters with unaccented characters.
MITSep 11, 2026 · metrics 2.10.0
PyPI
hukkin/mdformat-tables
An mdformat plugin for rendering tables
MITSep 10, 2026 · metrics 2.10.0
npm
jonschlinkert/class-utils
Utils for working with JavaScript classes and prototype methods.
MITSep 15, 2026 · metrics 2.10.0
npm
jonschlinkert/is-extendable
Answers the question: "can this value have keys?". Returns true if a value is any of the object types: array, regexp, plain object, function or date. Useful for determining if a value is an object that can be extended.
MITOct 20, 2026 · metrics 2.10.0
Packagist
kartik-v/yii2-widget-rangeinput
An enhanced Yii 2 widget encapsulating the HTML 5 range input (sub repo split from yii2-widgets)
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
m2mtech/flysystem-stream-wrapper
A stream wrapper for Flysystem V2+
MITSep 17, 2026 · metrics 2.10.0
npm
mike-spainhower/querystring
Node's querystring module for all engines. (ES3 compat fork)
MITSep 15, 2026 · metrics 2.10.0