Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,156
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
d3/d3-scale
Encodings that map abstract data to visual representation.
ISCSep 17, 2026 · metrics 2.10.0
PyPI
litl/rauth
A Python library for OAuth 1.0/a, 2.0, and Ofly.
MITSep 17, 2026 · metrics 2.10.0
PyPI
cgarciae/pypeln
Concurrent data pipelines in Python >>>
MITSep 17, 2026 · metrics 2.10.0
PyPI
os/slacker
Full-featured Python interface for the Slack API
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
cruft/cruft
Allows you to maintain all the necessary cruft for packaging and building projects separate from the code you intentionally write. Built on-top of, and fully compatible with, CookieCutter.
MITSep 17, 2026 · metrics 2.10.0
PyPI
circus-tent/circus
A Process & Socket Manager built with zmq
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
thephpleague/event
Event package for your app and domain
MITSep 18, 2026 · metrics 2.10.0
PyPI
mbr/flask-bootstrap
Ready-to-use Twitter-bootstrap for use in Flask.
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
rust-crdt/rust-crdt
a collection of well-tested, serializable CRDTs for Rust
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
indutny/node-ip
IP address tools for node.js
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
nithinmurali/pygsheets
Google Sheets Python API v4
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
thephpleague/plates
Native PHP template system
MITSep 18, 2026 · metrics 2.10.0
npm
AriaMinaei/pretty-error
See node.js errors with less clutter
MITSep 17, 2026 · metrics 2.10.0
PyPI
rq/rq-scheduler
A lightweight library that adds job scheduling capabilities to RQ (Redis Queue)
MITSep 17, 2026 · metrics 2.10.0
PyPI
sigsep/open-unmix-pytorch
Open-Unmix - Music Source Separation for PyTorch
MITSep 17, 2026 · metrics 2.10.0
npm
ricmoo/aes-js
A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.
MITSep 17, 2026 · metrics 2.10.0
npm
scottie1984/swagger-ui-express
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
MITSep 17, 2026 · metrics 2.10.0
PyPI
erikrose/blessings
A thin, practical wrapper around terminal capabilities in Python
MITSep 17, 2026 · metrics 2.10.0
PyPI
CamDavidsonPilon/lifetimes
Lifetime value in Python
MITSep 17, 2026 · metrics 2.10.0
PyPI
google-deepmind/jraph
A Graph Neural Network Library in Jax
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
puleos/object-hash
Generate hashes from javascript objects in node and the browser.
MITSep 17, 2026 · metrics 2.10.0
PyPI
mmatl/pyrender
Easy-to-use glTF 2.0-compliant OpenGL renderer for visualization of 3D scenes.
MITSep 17, 2026 · metrics 2.10.0
npm
lukeed/dequal
A tiny (304B to 489B) utility to check for deep equality
MITSep 16, 2026 · metrics 2.10.0
PyPI
airbnb/binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
scroll-into-view/scroll-into-view-if-needed
Element.scrollIntoView ponyfills for things like "if-needed" and "smooth"
MITSep 17, 2026 · metrics 2.10.0
crates.io
ferrilab/bitvec
A crate for managing memory bit by bit
MITSep 17, 2026 · metrics 2.10.0
PyPI
lepture/flask-oauthlib
YOU SHOULD USE https://github.com/lepture/authlib
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
AndrewIngram/django-extra-views
Django's class-based generic views are awesome, let's have more of them.
MITSep 17, 2026 · metrics 2.10.0
npm
DirtyHairy/async-mutex
A mutex for synchronizing async workflows in Javascript
MITSep 18, 2026 · metrics 2.10.0
PyPI
verigak/progress
Easy to use progress bars for Python
ISCSep 17, 2026 · metrics 2.10.0