Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,347
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
iarna/in-publish
Detect if we were run as a result of `npm publish`.
ISCOct 18, 2026 · metrics 2.10.0
crates.io
datenlord/s3-server
Generic S3 server implementation
MITOct 20, 2026 · metrics 2.10.0
npm
AckerApple/angular-file
Angular components for user file select, drop, and more
MITOct 22, 2026 · metrics 2.10.0
Packagist
pmmp/BedrockData
Blobs of data generated from Minecraft: Bedrock Edition used by PocketMine-MP
CC0-1.0Oct 20, 2026 · metrics 2.10.0
npm
w8r/splay-tree
Fast splay-tree data structure
No licenseOct 19, 2026 · metrics 2.10.0
PyPI · npm
schettino72/sphinx_press_theme
A Sphinx-doc theme based on Vuepress
Custom licenseOct 21, 2026 · metrics 2.10.0
—
AntelopeIO/leap
C++ implementation of the Antelope protocol
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
apple/ccs-pykerberos
Python Kerberos library used by CalendarServer
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
google/json5format
JSON5 (a.k.a., "JSON for Humans") formatter that preserves contextual comments
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-to-html
utility to serialize hast to HTML
MITOct 20, 2026 · metrics 2.10.0
npm
wxsms/vue-md-loader
:sparkles: Markdown files to ALIVE Vue components.
MITOct 21, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-assert-plus
Extra assertions on top of node's assert module
MITOct 21, 2026 · metrics 2.10.0
npm
request/tunnel-agent
HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
xiyaowong/coc-sumneko-lua
Lua extension using sumneko lua-language-server for coc.nvim
MITOct 19, 2026 · metrics 2.10.0
Packagist
yireo/magento2-replace-tools
No repository description published.
No licenseOct 23, 2026 · metrics 2.10.0
crates.io
yoshuawuyts/miow
A zero-overhead Windows I/O library, focusing on IOCP
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
thomasa88/ParametricText
Fusion 360™ add-in for creating Text Parameters in sketches.
MITOct 19, 2026 · metrics 2.10.0
PyPI
alvinlindstam/grapheme
A python package for grapheme aware string handling
MITOct 19, 2026 · metrics 2.10.0
Maven
mqttsnet/open-exp-plugin
open-exp-plugin 是一个示例插件，旨在展示如何开发和扩展 ThingLinks 平台的功能。此插件提供了一个实验性功能扩展示例，帮助开发者深入了解如何利用 ThingLinks 的 API 和插件架构进行自定义开发和集成。
Custom licenseOct 21, 2026 · metrics 2.10.0
Go
youmark/pkcs8
Go package implementing functions to parse and convert private keys in PKCS#8 format, as defined in RFC5208 and RFC5958
MITOct 21, 2026 · metrics 2.10.0
Packagist
maxbeckers/amazon-alexa-php
Php library for amazon echo (alexa) skill development.
MITOct 21, 2026 · metrics 2.10.0
Go
libp2p/go-libp2p-swarm
The libp2p swarm manages groups of connections to peers, and handles incoming and outgoing streams
MITOct 18, 2026 · metrics 2.10.0
Maven
openjsse/openjsse
OpenJSSE: A JSSE provider that supports TLS 1.3 on Java SE 8
GPL-2.0Oct 19, 2026 · metrics 2.10.0
—
srawlins/timezone
Time zone database and time zone aware DateTime object for Dart.
BSD-2-ClauseOct 22, 2026 · metrics 2.10.0
Maven
ndw/xmlcalabash1
XML Calabash, an XProc processor
No licenseOct 19, 2026 · metrics 2.10.0
PyPI
wemake-services/flake8-broken-line
🚨 Flake8 plugin to forbid backslashes (\) for line breaks
MITOct 19, 2026 · metrics 2.10.0
PyPI
allenai/allennlp-semparse
A framework for building semantic parsers (including neural module networks) with AllenNLP, built by the authors of AllenNLP
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
ethereum-optimism/asterisc
RISC-V interactive fault proof tech
MITOct 21, 2026 · metrics 2.10.0
npm · crates.io
bitcoinjs/tiny-secp256k1
A tiny secp256k1 native/JS wrapper
MITOct 17, 2026 · metrics 2.10.0
PyPI
lkreidberg/batman
Fast transit light curves models in Python.
GPL-3.0Oct 22, 2026 · metrics 2.10.0