Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,067
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
michaelrampl/commity
Make writing commit messages fun again.
No licenseOct 20, 2026 · metrics 2.10.0
RubyGems
microsoft/kiota-serialization-json-ruby
Kiota serialization provider implementation for Ruby and JSON
MITOct 19, 2026 · metrics 2.10.0
RubyGems
mikedll/cknife
Ruby Gem with misc. command line utilities.
MITOct 20, 2026 · metrics 2.10.0
Hex
nervescloud/whenwhere
A small library for Nerves devices to check in with a Nerves project endpoint and get info
Apache-2.0Sep 9, 2026 · metrics 2.10.0
—
newrelic/nuget-azure-cloud-services
The nuget package for x64 apps (VMs or Cloud Services - Web Roles | Worker Roles) running on Windows Azure
MITSep 14, 2026 · metrics 2.10.0
—
nitrictech/contracts
Contracts for the Nitric APIs, served by Nitric Membrane and consumed by various language SDKs
No licenseSep 20, 2026 · metrics 2.10.0
Go
octasoft-ltd/gmail-exporter
A Go CLI tool for exporting and importing Gmail between accounts using OAuth
No licenseSep 19, 2026 · metrics 2.10.0
crates.io
octopus-network/substrate
Substrate: The platform for blockchain innovators
Apache-2.0Sep 25, 2026 · metrics 2.10.0
Packagist
onfleet/discontinued-php-onfleet
Onfleet API wrapper in PHP
MITSep 18, 2026 · metrics 2.10.0
—
open5gs/prometheus-client-c
A Prometheus Client in C
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io
openebs-archive/mayastor-api
No repository description published.
Apache-2.0Oct 15, 2026 · metrics 2.10.0
Go
openshift/ceph-csi
CSI driver for ceph
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
platform-mesh/platform-mesh-operator
No repository description published.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go
pulumiverse/pulumi-time
Pulumi Time provider used to interact with time-based resources.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go · RubyGems
puppetlabs/puppet-data-service
Puppet Data Service - SolArch implementation of the PDS
No licenseSep 10, 2026 · metrics 2.10.0
PyPI
qBraid/qBraid-Lab
Web-based JupyterLab deployment providing curated software tools for for researchers and developers in quantum computing.
Apache-2.0Oct 11, 2026 · metrics 2.10.0
—
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
MITSep 13, 2026 · metrics 2.10.0
RubyGems
ruby/readline
Readline Loader
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
ruiii/plugin-Hairstrength
senka-calc for poi
MITSep 18, 2026 · metrics 2.10.0
Go · npm
rustyguts/alcoves
Simple self-hosted media management application
No licenseSep 11, 2026 · metrics 2.10.0
Go
sacloud/api-client-go
さくらのクラウド向けAPI/HTTPクライアントライブラリ
Apache-2.0Oct 4, 2026 · metrics 2.10.0
PyPI
scieloorg/ioisis
I/O for ISIS files in Python
BSD-2-ClauseOct 23, 2026 · metrics 2.10.0
npm · Go · PyPI
sendify-project/sendify
A chat service with basic messaging features.
No licenseSep 10, 2026 · metrics 2.10.0
PyPI
seperman/orderly-set
Orderly Set previously known as Ordered Set
MITSep 10, 2026 · metrics 2.10.0
—
sigp/unsafe-eth2-deposit-contract
An UNSAFE deposit contract for testing Lighthouse. DO NOT USE.
No licenseSep 11, 2026 · metrics 2.10.0
npm
sinonjs/commons
Simple functions shared among the sinon end user libraries
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
sphinx-doc/sphinxcontrib-devhelp
No repository description published.
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
sphinx-doc/sphinxcontrib-serializinghtml
No repository description published.
Custom licenseOct 23, 2026 · metrics 2.10.0
NuGet
thygrrr/fennecs-fork
... the tiny, tiny, high-energy Entity Component System!
MITSep 25, 2026 · metrics 2.10.0
PyPI
tjdwls101010/IBD-RS-Rating
No repository description published.
MITOct 22, 2026 · metrics 2.10.0