Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,347
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
dawsbot/config-chain
Handle configuration once and for all
MITOct 20, 2026 · metrics 2.10.0
Packagist
rectorphp/type-perfect
Next level type declaration check PHPStan rules
MITOct 20, 2026 · metrics 2.10.0
PyPI
ansible-collections/junipernetworks.junos
Ansible Network Collection for Juniper JunOS
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
bcoin-org/bcrypto
JS crypto library
Custom licenseOct 22, 2026 · metrics 2.10.0
Packagist
chriskonnertz/string-calc
PHP calculator library for mathematical terms (expressions) passed as strings
MITOct 18, 2026 · metrics 2.10.0
Go
hashicorp/terraform-provider-postgresql
As part of our introduction to self-service publishing in the Terraform Registry, this copy of the provider has been archived, and ownership has been transferred to active maintainers in the community. Please see the new location on the Terraform Registry: https://registry.terraform.io/providers/cyrilgdn/postgresql
MPL-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
lndk-org/lndk
No repository description published.
MITOct 20, 2026 · metrics 2.10.0
PyPI
chrisrude/oobabot
A Discord bot which talks to Large Language Model AIs running on oobabooga's text-generation-webui
MITOct 19, 2026 · metrics 2.10.0
Maven
conductor-framework/conductor
[NO LONGER MAINTAINED] The Selenium framework that takes you where you want to go
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
hashicorp/consul-api-gateway
The Consul API Gateway is a dedicated ingress solution for intelligently routing traffic to applications running on a Consul Service Mesh.
MPL-2.0Oct 22, 2026 · metrics 2.10.0
npm
inrupt-archived/solid-ui-react
React SDK using @inrupt/solid-client
MITOct 19, 2026 · metrics 2.10.0
PyPI
ninemoreminutes/django-crum
Django CRUM (Current Request User Middleware) captures the current request and user in thread local storage.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
spdy-http2/spdy-transport
SPDY v2, v3, v3.1 and HTTP2 transport implementation for node.js
No licenseOct 21, 2026 · metrics 2.10.0
Maven
sebfz1/wicket-jquery-ui
jQuery UI & Kendo UI integration in Wicket
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
milvus-io/milvus-insight
Milvus management GUI
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
chai2010/gettext-go
:ab: GNU gettext for Go (Imported By Kubernetes)
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
primefaces/primeuix
PrimeUIX is a shared package used by all Prime libraries, allowing PrimeTek teams to unify theming.
MITOct 22, 2026 · metrics 2.10.0
Go
remyoudompheng/bigfft
Big integer multiplication library for Go using Fast Fourier transform
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
request/caseless
Caseless object set/get/has, very useful when working with HTTP headers.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
canonical/sec-cvescan
Analyzes an Ubuntu system and checks for unpatched vulnerabilities.
GPL-3.0Oct 23, 2026 · metrics 2.10.0
npm
feross/is-buffer
Determine if an object is a Buffer
MITOct 20, 2026 · metrics 2.10.0
npm
mafintosh/thunky
Delay the evaluation of a paramless async function and cache the result
MITOct 21, 2026 · metrics 2.10.0
Go
open-telemetry/opentelemetry-log-collection
OpenTelemetry log collection library
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
benjamn/wryware
A collection of packages that are probably a little too clever. Use at your own wrisk.
MITOct 22, 2026 · metrics 2.10.0
PyPI
jeremykawahara/derm7pt
Dermatology dataset composed of a diagnosis and seven-point checklist criteria labels
Custom licenseOct 23, 2026 · metrics 2.10.0
Packagist
raphaelstolt/php-jsonpointer
JSON Pointer implementation for PHP.
MITOct 20, 2026 · metrics 2.10.0
npm
auth0-lab/mdl
Parse and validate MDOC CBOR encoded binaries according to ISO 18013-5.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
ddarriba/modeltest
Best-fit model selection
GPL-3.0Oct 21, 2026 · metrics 2.10.0
—
jsdom/abab
Perfectly spec-compliant atob and btoa implementations
No licenseOct 21, 2026 · metrics 2.10.0
—
ethereum/consensus-spec-tests
Common tests for the Ethereum proof-of-stake consensus layer
MITOct 18, 2026 · metrics 2.10.0