Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,373
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
handshake-org/hsd
Handshake Daemon & Full Node
Custom licenseSep 8, 2026 · metrics 2.10.0
npm
taylorhakes/fecha
Lightweight and simple JS date formatting and parsing
MITAug 13, 2026 · metrics 2.10.0
PyPI
sybrenjansen/mpire
A Python package for easy multiprocessing, but faster than multiprocessing
MITAug 27, 2026 · metrics 2.10.0
PyPI
fugue/credstash
A little utility for managing credentials in the cloud
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
Behat/Transliterator
Behat Transliterator library inherited from Doctrine1 and used in Behat for snippet generation
Custom licenseJul 30, 2026 · metrics 2.10.0
RubyGems
rails/arel
A Relational Algebra
No licenseJul 22, 2026 · metrics 2.10.0
npm
epoberezkin/fast-deep-equal
The fastest deep equality check with Date, RegExp and ES6 Map, Set and typed arrays support
MITAug 4, 2026 · metrics 2.10.0
Maven
airsonic/airsonic
:satellite: :cloud: :notes:Airsonic, a Free and Open Source community driven media server (fork of Subsonic and Libresonic)
GPL-3.0Jul 23, 2026 · metrics 2.10.0
Packagist
matthiasmullie/minify
CSS & JavaScript minifier, in PHP. Removes whitespace, strips comments, combines files (incl. @import statements and small assets in CSS files), and optimizes/shortens a few common programming patterns.
MITAug 3, 2026 · metrics 2.10.0
PyPI
JazzCore/python-pdfkit
Wkhtmltopdf python wrapper to convert html to pdf
MITAug 27, 2026 · metrics 2.10.0
npm · PyPI
KudoAI/chatgpt.js
🤖 A powerful, lightweight JavaScript library + interactive CLI for ChatGPT
No licenseAug 25, 2026 · metrics 2.10.0
Go
census-instrumentation/opencensus-go
A stats collection and distributed tracing framework
Apache-2.0Aug 22, 2026 · metrics 2.10.0
—
pimusicbox/pimusicbox
An image (SD-card) to turn the Raspberry Pi into an easy to use MusicBox with Spotify playback and AirTunes streaming
Apache-2.0Jul 19, 2026 · metrics 2.10.0
crates.io
rust-lang-nursery/lazy-static.rs
A small macro for defining lazy evaluated static variables in Rust.
Apache-2.0Aug 3, 2026 · metrics 2.10.0
npm
expressjs/cookie-parser
Parse HTTP request cookies
MITAug 13, 2026 · metrics 2.10.0
PyPI
nidhaloff/deep-translator
A flexible free and unlimited python tool to translate between different languages in a simple way using multiple translators.
Apache-2.0Jul 24, 2026 · metrics 2.10.0
npm
zspecza/common-tags
🔖 Useful template literal tags for dealing with strings in ES2015+
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
xlang-ai/instructor-embedding
[ACL 2023] One Embedder, Any Task: Instruction-Finetuned Text Embeddings
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
softonic/axios-retry
Axios plugin that intercepts failed requests and retries them whenever possible
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
rubik/radon
Various code metrics for Python code
MITAug 27, 2026 · metrics 2.10.0
npm
ionic-team/ionic-cli
The Ionic command-line interface
MITAug 13, 2026 · metrics 2.10.0
npm
SGrondin/bottleneck
Job scheduler and rate limiter, supports Clustering
MITAug 13, 2026 · metrics 2.10.0
npm
TypeStrong/fork-ts-checker-webpack-plugin
Webpack plugin that runs typescript type checker on a separate process.
MITAug 13, 2026 · metrics 2.10.0
npm
Tencent/cloudbase-framework
腾讯云开发云原生一体化部署工具 🚀 CloudBase Framework：一键部署，不限框架语言，云端一体化开发，基于Serverless 架构
Custom licenseSep 6, 2026 · metrics 2.10.0
npm
d3/d3-force
Force-directed graph layout using velocity Verlet integration.
ISCAug 13, 2026 · metrics 2.10.0
npm
FormidableLabs/prism-react-renderer
🖌️ Renders highlighted Prism output to React (+ theming & vendored Prism)
MITAug 27, 2026 · metrics 2.10.0
PyPI
keras-team/keras-applications
Reference implementations of popular deep learning models.
Custom licenseAug 13, 2026 · metrics 2.10.0
Maven · PyPI · RubyGems
mozilla-mobile/android-components
⚠️ This project moved to a new repository. It is now developed and maintained at: https://github.com/mozilla-mobile/firefox-android
MPL-2.0Jul 18, 2026 · metrics 2.10.0
PyPI
Belval/pdf2image
A python module that wraps the pdftoppm utility to convert PDF to PIL Image object
MITAug 27, 2026 · metrics 2.10.0
npm
Starcounter-Jack/JSON-Patch
Lean and mean Javascript implementation of the JSON-Patch standard (RFC 6902). Update JSON documents using delta patches.
MITAug 13, 2026 · metrics 2.10.0