Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,768
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
amphp/uri
Uri Parser and Resolver.
MITAug 24, 2026 · metrics 2.10.0
npm
exercism/gui
No repository description published.
MITAug 3, 2026 · metrics 2.10.0
—
flatcar/coreos-overlay
moved to https://github.com/flatcar/scripts/tree/main/sdk_container/src/third_party - package build scripts for Flatcar Container Linux, with custom overlay on kinvolk/portage-stable
Custom licenseJul 18, 2026 · metrics 2.10.0
npm
isaacs/color-support
A module which will endeavor to guess your terminal's level of color support.
ISCAug 31, 2026 · metrics 2.10.0
—
kinvolk/coreos-overlay
moved to https://github.com/flatcar/scripts/tree/main/sdk_container/src/third_party - package build scripts for Flatcar Container Linux, with custom overlay on kinvolk/portage-stable
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
lukasturcani/mol-draw
A lightweight, 3D molecular viewer for JavaScript and PureScript applications.
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
micromatch/is-extglob
Returns true if a string has an extglob
MITJul 22, 2026 · metrics 2.10.0
—
ngmoco/syslog_logger
An improved Logger replacement that logs to syslog. It is almost drop-in with a few caveats.
No licenseJul 22, 2026 · metrics 2.10.0
Packagist
privacyidea/simplesamlphp-module-privacyidea
:fish: OTP Two Factor Authentication Module for simpleSAMLphp to run with privacyIDEA
AGPL-3.0Aug 17, 2026 · metrics 2.10.0
Packagist
sclable/xml-lint
A php tool to lint and validate xml files from the commandline.
MITJul 28, 2026 · metrics 2.10.0
PyPI
sphinx-contrib/images
sphinxcontrib-images extension
Apache-2.0Aug 19, 2026 · metrics 2.10.0
Packagist
amphp/phpunit-util
Helper package to ease testing with PHPUnit.
MITJul 30, 2026 · metrics 2.10.0
Go
blizzy78/varnamelen
Go analyzer checking that the length of a variable's name matches its usage scope
MITAug 4, 2026 · metrics 2.10.0
npm
css-modules/icss-utils
Search & replace tokens during the linking stage of ICSS loading
ISCAug 22, 2026 · metrics 2.10.0
Maven
goto1134/structurizr-d2-exporter
Export structurizr views to D2 diagrams
Apache-2.0Aug 8, 2026 · metrics 2.10.0
npm
iam-medvedev/chrome-devtools
Automated Chrome DevTools frontend builder
MITJul 24, 2026 · metrics 2.10.0
—
jsdom/domexception
An implementation of the DOMException class from browsers
No licenseAug 31, 2026 · metrics 2.10.0
npm
jsdom/w3c-xmlserializer
An XML serializer that follows the W3C specification.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
krainboltgreene/paper_trail-background.rb
Process Papertrail versioning in the background
Custom licenseJul 25, 2026 · metrics 2.10.0
PyPI
minrk/asyncio-atexit
atexit, but for asyncio
MITAug 22, 2026 · metrics 2.10.0
Hex
mirego/plug_image_processing
Endpoint to process images within your Plug application, compatible with imaginary API
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
Go
moby/locker
This is a direct pull from https://github.com/moby/moby/tree/master/pkg/locker
Apache-2.0Aug 21, 2026 · metrics 2.10.0
crates.io
nervosnetwork/mercury
Building on top of ckb-indexer, Mercury provides handy integration features for Nervos CKB.
MITJul 25, 2026 · metrics 2.10.0
Maven · npm
oerpub/Aloha-Editor
OERPUB Aloha Editor is a repo for the development of Aloha plugins, models, tests, and examples for use in the production of books and open educational resources. We intend to commit all code back to Aloha when plugins reach maturity.
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist
roadrunner-php/worker
Base PHP worker for RoadRunner server.
MITAug 13, 2026 · metrics 2.10.0
npm
sanity-io/icons
No repository description published.
MITAug 22, 2026 · metrics 2.10.0
crates.io
sfackler/shell-escape
No repository description published.
Apache-2.0Aug 1, 2026 · metrics 2.10.0
crates.io
sgodwincs/ordered-multimap-rs
An ordered multimap.
MITAug 13, 2026 · metrics 2.10.0
—
terracoin/terracoin
Terracoin - A cryptocurrency for the world!
MITAug 1, 2026 · metrics 2.10.0
crates.io
thomcc/fast-srgb8
Fast conversion between linear float and 8-bit sRGB
Apache-2.0Aug 22, 2026 · metrics 2.10.0