Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,378
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
boxyhq/ui
UI toolkit to ease BoxyHQ integration
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
capnfabs/grouse
A diff tool for Hugo static sites.
MITSep 19, 2026 · metrics 2.10.0
Go
chrismellard/docker-credential-acr-env
No repository description published.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
conventional-changelog/get-pkg-repo
Get repository user and project information from package.json file contents.
MITSep 23, 2026 · metrics 2.10.0
—
deepfryed/idn-ruby
LibIDN Ruby Bindings.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
dgrtwo/tidytuesday
Official repo for the #tidytuesday project
CC0-1.0Oct 22, 2026 · metrics 2.10.0
npm
element-hq/matrix-react-sdk
Matrix SDK for React Javascript
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
fleet-ai/fleet-sdk
Fleet Python SDK
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
fniessink/next-action
Next-action: determine the next action to work on from a list of actions in a todo.txt file
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
grafana-cold-storage/certmagic-gcs
GCS storage for Certmagic
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
crates.io · Maven
h-akatsuki/hitomi_search_plus
A fast and efficient Hitomi.la search application built with Flutter. Features advanced search, smart bookmarks, and a modern UI.
No licenseSep 10, 2026 · metrics 2.10.0
npm
iarna/promise-inflight
One promise for multiple requests in flight to avoid async duplication
ISCSep 15, 2026 · metrics 2.10.0
RubyGems
ioquatix/bake-test-external
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
Hex
jarlah/docker-engine-api-elixir
An autogenerated docker engine api library for Elixir, generated from the OpenAPI spec
MITOct 25, 2026 · metrics 2.10.0
Go
jingyugao/rowserrcheck
Analyzer: checks whether err of sql.Rows is checked.
MITOct 21, 2026 · metrics 2.10.0
crates.io
jonas-schievink/adler
Rust crate for computing Adler-32 checksums
0BSDSep 18, 2026 · metrics 2.10.0
npm
jonschlinkert/map-visit
Map `visit` over an array of objects.
MITSep 15, 2026 · metrics 2.10.0
Go
libp2p/go-libp2p-transport-upgrader
No repository description published.
MITOct 18, 2026 · metrics 2.10.0
Go
libp2p/go-msgio
simple package to r/w length-delimited slices.
MITSep 23, 2026 · metrics 2.10.0
npm
mattrglobal/bls12381-key-pair
A library for using BLS 12-381 key pairs
Apache-2.0Sep 26, 2026 · metrics 2.10.0
npm
n8n-io/vm2
Advanced vm/sandbox for Node.js
MITOct 23, 2026 · metrics 2.10.0
Go
open-edge-platform/orch-cli
Open Edge Platform Command Line Interface
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
oramasearch/orama-ui-components
A set of UI components to help you integrate Orama on your website or app.
Custom licenseOct 20, 2026 · metrics 2.10.0
Packagist · npm
pimcore/admin-ui-classic-bundle
No repository description published.
Custom licenseOct 21, 2026 · metrics 2.10.0
Maven
prestodb/drift
An annotation-based Java library for creating Thrift serializable types and services.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
purescript/purescript-nonempty
A generic non-empty data structure
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
PyPI
pytorch-tpu/transformers
🤗 Transformers: State-of-the-art Natural Language Processing for TensorFlow 2.0 and PyTorch.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
sailthru/sailthru-node-client
Sailthru Node.js client
MITOct 10, 2026 · metrics 2.10.0
Hex
schurhammer/gleamy_bench
A library for benchmarking gleam code.
Apache-2.0Oct 6, 2026 · metrics 2.10.0
—
sero-cash/serominer
Sero gpu miner of progpow
GPL-3.0Oct 23, 2026 · metrics 2.10.0