Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,436
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
svaarala/duktape-releases
Duktape release binaries
No licenseOct 18, 2026 · metrics 2.10.0
Maven
valtimo-platform/valtimo-backend-libraries
Welcome at the Valtimo repository. Valtimo is the less-code platform for Business Process Automation. Built on top of business process orchestrator Camunda. Valtimo's goal is to make implementing business process automation and case management easy. Valtimo is the server side component for business process automation.
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
yargs/require-main-filename
shim for require.main.filename() that works in as many environments as possible
ISCOct 20, 2026 · metrics 2.10.0
crates.io · npm
GrinZero/dpdm-fast
Detect circular dependencies in your TypeScript projects with `Rust`.
MITOct 20, 2026 · metrics 2.10.0
npm
aurelia/pal
Aurelia's Platform Abstraction Layer
MITOct 19, 2026 · metrics 2.10.0
Go
binbandit/sage
Burning away Git complexity
MITOct 19, 2026 · metrics 2.10.0
PyPI
brettcannon/modutil
A library for working with Python modules
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
No licenseOct 22, 2026 · metrics 2.10.0
npm
ealush/flairup
🎩 CSS-In-JS Library for package authors
MITOct 16, 2026 · metrics 2.10.0
npm
jonschlinkert/is-extendable
Answers the question: "can this value have keys?". Returns true if a value is any of the object types: array, regexp, plain object, function or date. Useful for determining if a value is an object that can be extended.
MITOct 20, 2026 · metrics 2.10.0
npm
spdy-http2/handle-thing
The Thing when you need it
No licenseOct 21, 2026 · metrics 2.10.0
npm
stur86/crystvis-js
A Three.js based crystallographic visualisation tool
MITOct 18, 2026 · metrics 2.10.0
crates.io
swgillespie/unicode-categories
A simple crate that allows for unicode categories can be queried for characters.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
theofidry/console
Library for creating CLI commands or applications
MITOct 22, 2026 · metrics 2.10.0
Go
useinsider/go-pkg
No repository description published.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
OpenFunction/functions-framework-go
Go functions framework for OpenFunction
No licenseOct 19, 2026 · metrics 2.10.0
—
SpiNNakerManchester/spinnaker_tools
SpiNNaker API, sark, sc&mp, bmp firmware and build tools
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Packagist
Sylius/SyliusInventoryBundle
[READ-ONLY] Flexible inventory management for Symfony2 e-commerce applications.
MITOct 21, 2026 · metrics 2.10.0
npm
artilleryio/artillery-plugin-publish-metrics
Moved to https://github.com/artilleryio/artillery/tree/main/packages/artillery-plugin-publish-metrics
No licenseOct 23, 2026 · metrics 2.10.0
Go · npm
brigadecore/brigade-github-app
A Brigade v1.x compatible gateway for forwarding events from GitHub to Brigade
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
consensus-shipyard/ipc-libs
Implementation of an IPC client and libraries
MITOct 21, 2026 · metrics 2.10.0
—
dotnet/source-build-externals
This repo contains the source that resides outside of the dotnet organization required to build .NET from source.
No licenseOct 18, 2026 · metrics 2.10.0
Maven
emilianobonassi/jpbc
jPBC fork for get Maven works again
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
iarna/has-unicode
Try to guess if your terminal supports unicode
ISCOct 21, 2026 · metrics 2.10.0
Go
kairos-io/kairos-agent
:wrench: Lifecycle agent for kairos
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
microsoft/use-disposable
Creating instances in React during render that need to be disposed even with StrictMode
MITOct 21, 2026 · metrics 2.10.0
—
oxen-io/libsession-util
Session utilities library
GPL-3.0Oct 20, 2026 · metrics 2.10.0
PyPI
sandialabs/PyRIID
ML-based radioisotope identification and estimation from gamma spectra in Python.
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
npm
spdy-http2/http-deceiver
Deceive HTTP Parser
No licenseOct 21, 2026 · metrics 2.10.0
PyPI
ukBaz/python-btsocket
Python library to interact with the Bluez Bluetooth Management API communicating with the kernel using a so-called Bluetooth Management sockets
MITOct 20, 2026 · metrics 2.10.0