Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
download-maven-plugin/download-maven-plugin
These are a few plugins to help maven user to download different files on different protocol in part of maven build.
Apache-2.0Jul 30, 2026 · metrics 2.10.0
npm
endpoints/endpoints
a hypermedia API framework for javascript.
MITAug 15, 2026 · metrics 2.10.0
Go
pavlo-v-chernykh/keystore-go
A Go (golang) implementation of Java KeyStore encoder/decoder
MITAug 28, 2026 · metrics 2.10.0
npm
sindresorhus/environment
Check which JavaScript environment your code is running in at runtime: browser, Node.js, Bun, etc
MITAug 4, 2026 · metrics 2.10.0
npm
empirical-run/empirical
Test and evaluate LLMs and model configurations, across all the scenarios that matter for your application
MITSep 8, 2026 · metrics 2.10.0
npm
gkz/optionator
JavaScript option parsing and help generation library
MITAug 4, 2026 · metrics 2.10.0
npm
metafizzy/outlayer
:construction_worker: the brains & guts of a layout library
No licenseAug 27, 2026 · metrics 2.10.0
RubyGems
rdp/os
The OS gem allows for some easy telling if you’re on windows or not. OS.windows? as well as some other helper utilities
MITJul 22, 2026 · metrics 2.10.0
Go
sabhiram/go-gitignore
A gitignore parser for go
MITAug 29, 2026 · metrics 2.10.0
NuGet
4RTools/4RTools
Autopot, Skill Spammer, Dancer Macro and more
MITAug 9, 2026 · metrics 2.10.0
PyPI
avalonv/reCBZ
Utility for converting and optimizing comics for e-readers & mobile devices
GPL-3.0Aug 23, 2026 · metrics 2.10.0
—
Baseflow/octo_image
A multifunctional Flutter image widget
MITSep 5, 2026 · metrics 2.10.0
RubyGems
Codaisseur/terminal-notifier-guard
Mac OS X User Notifications for Guard
Custom licenseJul 28, 2026 · metrics 2.10.0
—
dash-project/dash
DASH, the C++ Template Library for Distributed Data Structures with Support for Hierarchical Locality for HPC and Data-Driven Science
Custom licenseJul 27, 2026 · metrics 2.10.0
npm
gnosis/gp-v2-contracts
Smart contracts for the Gnosis Protocol v2
LGPL-3.0Aug 16, 2026 · metrics 2.10.0
npm
blokkli/editor
Interactive page editor for Nuxt 3
MITSep 9, 2026 · metrics 2.10.0
npm
DevExpress/devextreme-react
[MIGRATED] See https://github.com/DevExpress/DevExtreme/tree/HEAD/packages/devextreme-react
MITJul 26, 2026 · metrics 2.10.0
PyPI
PyCQA/flake8-docstrings
Integration of pydocstyle and flake8 for combined linting and reporting
MITAug 27, 2026 · metrics 2.10.0
PyPI
clarketm/mergedeep
A deep merge function for 🐍.
MITAug 27, 2026 · metrics 2.10.0
npm
flmnt/graphemer
Unicode character splitter
MITAug 4, 2026 · metrics 2.10.0
npm
inspect-js/object-inspect
string representations of objects in node and the browser
MITAug 4, 2026 · metrics 2.10.0
NuGet
serenity-is/serene
Serenity Application Template
MITJul 25, 2026 · metrics 2.10.0
RubyGems
inukshuk/bibtex-ruby
A BibTeX library, parser, and converter for Ruby.
GPL-3.0Jul 22, 2026 · metrics 2.10.0
crates.io
danburkert/fs2-rs
Extended utilities for working with files and filesystems in Rust
Custom licenseAug 13, 2026 · metrics 2.10.0
Packagist · npm
oneduo/nova-file-manager
The most advanced File Manager for Laravel Nova, feature rich and robust build.
MITJul 29, 2026 · metrics 2.10.0
—
googleapis/python-vision
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-vision
Apache-2.0Jul 29, 2026 · metrics 2.10.0
PyPI
ipipdotnet/ipdb-python
IPIP.net officially supported IP database ipdb format parsing library
Apache-2.0Sep 8, 2026 · metrics 2.10.0
npm
jonschlinkert/is-plain-object
Returns true if the given value is an object created by the Object constructor.
MITAug 4, 2026 · metrics 2.10.0
PyPI
timvink/mkdocs-table-reader-plugin
MkDocs plugin that enables a markdown tag like {{ read_csv('table.csv') }} to directly insert various table formats into a page
MITAug 8, 2026 · metrics 2.10.0
Packagist
clue/reactphp-block
Lightweight library that eases using components built for ReactPHP in a traditional, blocking environment.
MITJul 21, 2026 · metrics 2.10.0