Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,864
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
unjs/webpackbar
Elegant ProgressBar and Profiler for Webpack 3 , 4 and 5
MITSep 23, 2026 · metrics 2.10.0
RubyGems
interagent/prmd
JSON Schema tools and doc generation for HTTP APIs
MITSep 11, 2026 · metrics 2.10.0
Go
sergi/go-diff
Diff, match and patch text in Go
MITSep 14, 2026 · metrics 2.10.0
PyPI
pydoit/doit
CLI task management & automation tool
MITSep 17, 2026 · metrics 2.10.0
npm
OWASP/NodeGoat
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm
msaktype/stylefmt
stylefmt is a tool that automatically formats stylesheets.
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
handshake-org/hsd
Handshake Daemon & Full Node
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
konradhalas/dacite
Simple creation of data classes from dictionaries.
MITSep 12, 2026 · metrics 2.10.0
npm
taylorhakes/fecha
Lightweight and simple JS date formatting and parsing
MITSep 17, 2026 · metrics 2.10.0
PyPI
sybrenjansen/mpire
A Python package for easy multiprocessing, but faster than multiprocessing
MITOct 24, 2026 · metrics 2.10.0
PyPI
fugue/credstash
A little utility for managing credentials in the cloud
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
Behat/Transliterator
Behat Transliterator library inherited from Doctrine1 and used in Behat for snippet generation
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
pkg/profile
Simple profiling for Go
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
npm
epoberezkin/fast-deep-equal
The fastest deep equality check with Date, RegExp and ES6 Map, Set and typed arrays support
MITSep 16, 2026 · metrics 2.10.0
RubyGems
rails/arel
A Relational Algebra
No licenseSep 12, 2026 · metrics 2.10.0
PyPI
JazzCore/python-pdfkit
Wkhtmltopdf python wrapper to convert html to pdf
MITOct 24, 2026 · metrics 2.10.0
Maven
airsonic/airsonic
:satellite: :cloud: :notes:Airsonic, a Free and Open Source community driven media server (fork of Subsonic and Libresonic)
GPL-3.0Sep 13, 2026 · metrics 2.10.0
PyPI
nidhaloff/deep-translator
A flexible free and unlimited python tool to translate between different languages in a simple way using multiple translators.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
RedisGraph/RedisGraph
A graph database as a Redis module
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
matthiasmullie/minify
CSS & JavaScript minifier, in PHP. Removes whitespace, strips comments, combines files (incl. @import statements and small assets in CSS files), and optimizes/shortens a few common programming patterns.
MITSep 16, 2026 · metrics 2.10.0
Go
census-instrumentation/opencensus-go
A stats collection and distributed tracing framework
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
noamgat/lm-format-enforcer
Enforce the output format (JSON Schema, Regex etc) of a language model
MITOct 24, 2026 · metrics 2.10.0
npm · PyPI
KudoAI/chatgpt.js
🤖 A powerful, lightweight JavaScript library + interactive CLI for ChatGPT
No licenseSep 29, 2026 · metrics 2.10.0
PyPI
rubik/radon
Various code metrics for Python code
MITOct 24, 2026 · metrics 2.10.0
crates.io
rust-lang-nursery/lazy-static.rs
A small macro for defining lazy evaluated static variables in Rust.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
pimusicbox/pimusicbox
An image (SD-card) to turn the Raspberry Pi into an easy to use MusicBox with Spotify playback and AirTunes streaming
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
expressjs/cookie-parser
Parse HTTP request cookies
MITSep 17, 2026 · metrics 2.10.0
npm
microsoft/just
The task library that just works
MITSep 12, 2026 · metrics 2.10.0
npm
zspecza/common-tags
🔖 Useful template literal tags for dealing with strings in ES2015+
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
xlang-ai/instructor-embedding
[ACL 2023] One Embedder, Any Task: Instruction-Finetuned Text Embeddings
Apache-2.0Sep 17, 2026 · metrics 2.10.0