Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,052
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITSep 16, 2026 · metrics 2.10.0
RubyGems
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
MITOct 20, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
zopefoundation/zope.deprecation
No repository description published.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
23jdd/SamKv
一个面向日志场景的单机 LSM-Tree KV 存储引擎,提供 webui操作界面
MITOct 4, 2026 · metrics 2.10.0
—
4paradigm/hybridsql-asserts
HybridSQL third-party libraries
Apache-2.0Sep 11, 2026 · metrics 2.10.0
crates.io
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
MITOct 23, 2026 · metrics 2.10.0
Go
AgustinBanchio/go-limit
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
crates.io
AlexanderSchuetz97/xz4rust
Memory Safe pure Rust no-std & no alloc XZ decoder
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
Automattic/sqlite-database-integration
A fork of https://github.com/WordPress/sqlite-database-integration/.
GPL-2.0Sep 13, 2026 · metrics 2.10.0
Go
AzureAD/microsoft-authentication-extensions-for-go
Secure cross-platform token cache for MSAL public client apps
MITSep 14, 2026 · metrics 2.10.0
Go
Bedrock-OSS/go-burrito
No repository description published.
MITSep 15, 2026 · metrics 2.10.0
—
Consensys-Incorporated/go-ethereum
Official golang implementation of the Ethereum protocol
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
RubyGems
DFE-Digital/rspec-retry
Retry randomly failing rspec example. This is an extension to the original gem, that will log flakey tests to an output file.
MITSep 19, 2026 · metrics 2.10.0
Go
DataDog/btfhub-online-go
## Auto-archived due to inactivity. ## Golang client to communicate with the BTFHub online server
Apache-2.0Sep 10, 2026 · metrics 2.10.0
RubyGems · crates.io
DataDog/libddprof
libddprof has been renamed to libdatadog and development has moved to https://github.com/datadog/libdatadog
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
DataDog/viper
Go configuration with fangs
MITSep 15, 2026 · metrics 2.10.0
Go
Deali-Axy/ebook-generator
把txt文件转成epub和mobi电子书的工具
Custom licenseSep 10, 2026 · metrics 2.10.0
npm
Ethan-Arrowood/undici
An HTTP/1.1 client, written from scratch for Node.js
MITSep 13, 2026 · metrics 2.10.0
Go
Fantom-foundation/go-ethereum-substate
No repository description published.
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
HubSpotWebTeam/wt-eslint-browser
This is a list of ESLint rules that are recommended for use with Hubspot Marketing WebTeam projects.
No licenseOct 21, 2026 · metrics 2.10.0
Go
K-Phoen/sdk
Library for using Grafana' structures in Go programs and client for Grafana REST API.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
MetaMask/eslint-plugin-design-tokens
An ESLint plugin designed to enforce best practices and consistency for using MetaMask design tokens across various projects.
Apache-2.0Sep 28, 2026 · metrics 2.10.0
npm · Maven
MetaMask/react-native-payments
Accept Payments with Apple Pay and Android Pay using the Payment Request API.
No licenseSep 28, 2026 · metrics 2.10.0
Go
Noooste/fhttp
fhttp
No licenseSep 16, 2026 · metrics 2.10.0
—
Polpetta/SecurityAndRiskManagementNotes
Notes about 'Security and Risk management' course in Italian
No licenseSep 16, 2026 · metrics 2.10.0
Go · npm
Polymarket/s3x
s3x is a fork of minio providing an S3 API powered by TemporalX that uses IPFS as the data storage layer. It lets you turn any S3 application into an IPFS application with no change in application design
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist
PrestaShopCorp/module-lib-mbo-installer
A helper to ease the download and unzip of modules from the Addons Marketplace
OSL-3.0Sep 14, 2026 · metrics 2.10.0
—
Psiphon-Inc/configloader-go
Config loading library for Go
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0