Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,298
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
cmu-delphi/www-covidcast
Front end for interactive visualizations powering the COVIDcast website.
MITOct 22, 2026 · metrics 2.10.0
—
contour-terminal/reflection-cpp
C++ static reflection support library
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
covalenthq/erigon
Ethereum implementation on the efficiency frontier
LGPL-3.0Sep 14, 2026 · metrics 2.10.0
npm
diegomura/media-engine
Media queries engine written in pure JS!
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
fact-project/pyfact
A python package with useful methods concernig the FACT-telescope
No licenseOct 23, 2026 · metrics 2.10.0
Hex
fremantle-industries/ex_bitmex
BitMEX API Client for Elixir
MITSep 15, 2026 · metrics 2.10.0
RubyGems
gamache/fuzzyurl.rb
A Ruby Gem for non-strict parsing, manipulation, and wildcard matching of URLs.
MITSep 11, 2026 · metrics 2.10.0
—
initCommerce/gato
A dart utility library inspired by javascript lodash library.
MITSep 13, 2026 · metrics 2.10.0
Maven
jakartaee/interceptors
Jakarta Interceptors
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
ljhopkins2/broadcastify-archtk
The Broadcastify Archive Toolkit for python
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
Hex
lpil/repeatedly
No repository description published.
No licenseSep 9, 2026 · metrics 2.10.0
npm
micromark/micromark-extension-mdx-expression
micromark extension to support MDX or MDX JS expressions
MITOct 21, 2026 · metrics 2.10.0
npm
opendevtools/clearingnummer
Clearing numbers for Swedish banks
MITOct 18, 2026 · metrics 2.10.0
Packagist
pantheon-systems/wordpress-composer
WordPress for Pantheon with a composer.json file.
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
piotrmurach/benchmark-perf
Benchmark execution time and iterations per second
MITSep 11, 2026 · metrics 2.10.0
Hex
primait/opentelemetry_absinthe
No repository description published.
No licenseOct 25, 2026 · metrics 2.10.0
PyPI
runtimeverification/pyk
Python tools for the K Framework
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
npm
samn/json-stable-stringify
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
Custom licenseSep 16, 2026 · metrics 2.10.0
crates.io
sgodwincs/dlv-list-rs
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
shish/safe
All PHP functions, rewritten to throw exceptions instead of returning false
MITSep 13, 2026 · metrics 2.10.0
crates.io
sigp/rust-libp2p
The Rust Implementation of libp2p networking stack.
MITSep 20, 2026 · metrics 2.10.0
npm
streamich/tree-dump
Simple console tree printing helpers
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-raw
utility to reparse a hast tree
MITOct 21, 2026 · metrics 2.10.0
crates.io
tormol/encode_unicode
A rust library for converting between UTF-8, UTF-16 and UTF-32 characters.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
unoplatform/Uno.UITest
Unified UI Testing Framework for Uno Platform based applications
Custom licenseSep 11, 2026 · metrics 2.10.0
Packagist
yoanm/symfony-jsonrpc-http-server
Symfony JSON-RPC HTTP Server to convert an HTTP json-rpc request into HTTP json-rpc response
MITOct 23, 2026 · metrics 2.10.0
Hex
Beaudidly/gbor
A CBOR library implemented in Gleam
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
InterNetX/js-domainrobot-sdk
A javascript package for easy integration of the Domainrobot API powered by InterNetX GmbH.
MITSep 16, 2026 · metrics 2.10.0
npm
Khan/mathquill
Magic textboxes where you can type math as easily as writing!
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Packagist
Kunstmaan/KunstmaanUtilitiesBundle
[READ-ONLY] Subtree split of the Kunstmaan UtilitiesBundle -- master at Kunstmaan/KunstmaanBundlesCMS
MITOct 12, 2026 · metrics 2.10.0