Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,333
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
FactomProject/factomd
Factom Daemon
Custom licenseOct 17, 2026 · metrics 2.10.0
npm
d3/d3-path
Serialize Canvas path commands to SVG.
ISCOct 21, 2026 · metrics 2.10.0
Maven · npm
bmwcarit/joynr
A transport protocol agnostic (MQTT, HTTP, WebSockets etc.) Franca IDL based communication framework supporting multiple communication paradigms (RPC, Pub-Sub, broadcast etc.)
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
basepom/duplicate-finder-maven-plugin
Maven plugin to find duplicate classes or resources
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
litixsoft/karma-mocha-reporter
Karma reporter plugin with mocha style logging.
Custom licenseOct 18, 2026 · metrics 2.10.0
npm
Pythe1337N/garmin-connect
Makes it simple to interface with Garmin Connect to get or set any data point.
MITOct 20, 2026 · metrics 2.10.0
Go
google/shlex
Automatically exported from code.google.com/p/go-shlex
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
Amber-MD/pytraj
Python interface of cpptraj
Custom licenseOct 22, 2026 · metrics 2.10.0
PyPI
SchedMD/slurm-gcp
Slurm on Google Cloud Platform
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
matusnovak/doxybook2
Doxygen XML to Markdown (or JSON)
MITOct 19, 2026 · metrics 2.10.0
npm
szmarczak/http-timer
🕐 Performance timings for HTTP requests
MITOct 20, 2026 · metrics 2.10.0
PyPI
OUDON/rmqrcode-python
Rectangular Micro QR Code (rMQR Code) Generator in Python
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
codecov/codecov-python
Python report uploader for Codecov
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
lava-nc/lava-dl
Deep Learning library for Lava
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
npm
baruchvlz/resq
React Element Selector Query (RESQ) - Query React components and children by component name or HTML selector
MITOct 19, 2026 · metrics 2.10.0
npm
PostHog/code
The era of self-driving development is here
MITOct 20, 2026 · metrics 2.10.0
npm
nodeftpd/nodeftpd
FTP Server in Node
MITOct 20, 2026 · metrics 2.10.0
Maven
EsotericSoftware/minlog
Minimal overhead Java logging
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
—
tracebox/tracebox
Tracebox, a middlebox detection tool
GPL-2.0Oct 20, 2026 · metrics 2.10.0
npm
trentm/node-dashdash
A light, featureful and explicit option parsing library for node.js.
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
ctidigital/magento2-configurator
Magento 2 Configurator
MITOct 19, 2026 · metrics 2.10.0
PyPI
google/python-subprocess32
A backport of the Python 3 subprocess module for use on Python 2.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
unshiftio/querystringify
Querystringify - Small, simple but powerful query string parser.
MITOct 21, 2026 · metrics 2.10.0
npm
statgen/locuszoom
A Javascript/d3 embeddable plugin for interactively visualizing statistical genetic data from customizable sources.
MITOct 18, 2026 · metrics 2.10.0
PyPI
zhenhuaw-me/tflite2onnx
Convert TensorFlow Lite models (*.tflite) to ONNX.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
erasureprotocol/erasure-protocol
Information wants to be expensive
MITOct 22, 2026 · metrics 2.10.0
PyPI
guzzle/guzzle_sphinx_theme
Sphinx theme used by Guzzle
MITOct 19, 2026 · metrics 2.10.0
crates.io
rwf2/multer
An async parser for multipart/form-data content-type in Rust
MITOct 20, 2026 · metrics 2.10.0
npm
d3/d3-timer
An efficient queue for managing thousands of concurrent animations.
ISCOct 21, 2026 · metrics 2.10.0
npm
empirical-run/empirical
Test and evaluate LLMs and model configurations, across all the scenarios that matter for your application
MITOct 22, 2026 · metrics 2.10.0