Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,333
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
kentcdodds/rtl-css-js
RTL for CSS in JS
MITOct 19, 2026 · metrics 2.10.0
Go
sabhiram/go-gitignore
A gitignore parser for go
MITOct 21, 2026 · metrics 2.10.0
npm
RocketChat/fuselage
React port of Rocket.Chat's design system, Fuselage
MITOct 22, 2026 · metrics 2.10.0
npm
aurelia/dependency-injection
A lightweight, extensible dependency injection container for JavaScript.
MITOct 19, 2026 · metrics 2.10.0
PyPI
ipipdotnet/ipdb-python
IPIP.net officially supported IP database ipdb format parsing library
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
aweris/gale
GitHub Action Local Executor
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
gazpachoking/jsonref
Automatically dereferences JSON references within a JSON document.
MITOct 21, 2026 · metrics 2.10.0
Go · npm · PyPI
Dan6erbond/share-me
An image and video hosting platform for your server, with rich embed support and API.
MITOct 20, 2026 · metrics 2.10.0
npm
mother/react-files
A file input (dropzone) management component for React
MITOct 18, 2026 · metrics 2.10.0
Packagist
tddwizard/magento2-fixtures
Fixture library for Magento 2 integration tests by @schmengler (@integer-net)
MITOct 22, 2026 · metrics 2.10.0
PyPI
svenkreiss/socialforce
Differentiable Social Force simulation with universal interaction potentials.
MITOct 21, 2026 · metrics 2.10.0
Maven
ww20081120/framework
java企业级底层框架，提供日志、缓存、DB访问、消息中间件、规则引擎、流程引擎、分布式事务便捷使用方法， 我们不重复造轮子，我们只是开源世界的搬运工。
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
calvinmetcalf/immediate
cross browser microtask
MITOct 21, 2026 · metrics 2.10.0
—
Wikunia/ConstraintSolver.jl
ConstraintSolver in Julia: Blog posts ->
MITOct 19, 2026 · metrics 2.10.0
NuGet
Polly-Contrib/Polly.Contrib.WaitAndRetry
Polly.Contrib.WaitAndRetry is an extension library for Polly containing helper methods for a variety of wait-and-retry strategies.
Custom licenseOct 21, 2026 · metrics 2.10.0
npm · PyPI · crates.io +1
tree-sitter/tree-sitter-css
CSS grammar for Tree-sitter
MITOct 21, 2026 · metrics 2.10.0
npm
auth0/node-samlp
SAML Protocol support for node (only IdP for now)
MITOct 21, 2026 · metrics 2.10.0
crates.io
dcjones/coitrees
A very fast interval tree data structure
MITOct 19, 2026 · metrics 2.10.0
crates.io
0xMiden/crypto
Cryptographic primitives used in Polygon Miden rollup
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Packagist
imanghafoori1/laravel-smart-facades
Strategy design pattern in laravel, the easiest way.
MITOct 21, 2026 · metrics 2.10.0
Go
leighmcculloch/gochecknoglobals
Check that no globals are present in Go code.
MITOct 21, 2026 · metrics 2.10.0
Go
dimchansky/utfbom
Detection of the BOM and removing as necessary
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
yapplabs/ember-radio-button
Radio button component with nice syntax.
MITOct 18, 2026 · metrics 2.10.0
npm
indutny/proof-of-work
Proof of Work with SHA256 and Bloom filter
No licenseOct 18, 2026 · metrics 2.10.0
Go
shermp/Kobo-UNCaGED
UNCaGED, for Kobo devices
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
npm
mysticatea/event-target-shim
An implementation of WHATWG EventTarget interface, plus few extensions.
MITOct 20, 2026 · metrics 2.10.0
—
DEShawResearch/random123
Counter-based random number generators for C, C++ and CUDA.
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io
bcmyers/num-format
A Rust crate for producing string representations of numbers, formatted according to international standards
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
soldair/node-walkdir
Walk a directory tree emitting events based on the contents. API compatable with node-findit. Walk a tree of any depth. Fast! Handles permission errors. Stoppable. windows support. Pull requests are awesome. watchers are appreciated.
MITOct 18, 2026 · metrics 2.10.0
crates.io
aldanor/qoi-rust
VERY fast encoder/decoder for QOI image format in pure and safe Rust
Apache-2.0Oct 20, 2026 · metrics 2.10.0