Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,878
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
attr-encrypted/attr_encrypted
Generates attr_accessors that encrypt and decrypt attributes
MITSep 12, 2026 · metrics 2.10.0
PyPI
brack3t/django-braces
Reusable, generic mixins for Django
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
softonic/axios-retry
Axios plugin that intercepts failed requests and retries them whenever possible
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io · npm
AppFlowy-IO/AppFlowy-Cloud
Bring projects, wikis, and teams together with AI. AppFlowy is the AI collaborative workspace where you achieve more without losing control of your data. The leading open source Notion alternative.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
npm
SGrondin/bottleneck
Job scheduler and rate limiter, supports Clustering
MITSep 17, 2026 · metrics 2.10.0
npm
ionic-team/ionic-cli
The Ionic command-line interface
MITSep 17, 2026 · metrics 2.10.0
npm
d3/d3-force
Force-directed graph layout using velocity Verlet integration.
ISCSep 17, 2026 · metrics 2.10.0
npm
FormidableLabs/prism-react-renderer
🖌️ Renders highlighted Prism output to React (+ theming & vendored Prism)
MITOct 24, 2026 · metrics 2.10.0
npm
TypeStrong/fork-ts-checker-webpack-plugin
Webpack plugin that runs typescript type checker on a separate process.
MITSep 17, 2026 · metrics 2.10.0
npm
Tencent/cloudbase-framework
腾讯云开发云原生一体化部署工具 🚀 CloudBase Framework：一键部署，不限框架语言，云端一体化开发，基于Serverless 架构
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
keajs/kea
Batteries Included State Management for React
MITSep 10, 2026 · metrics 2.10.0
PyPI
keras-team/keras-applications
Reference implementations of popular deep learning models.
Custom licenseSep 17, 2026 · metrics 2.10.0
Maven · PyPI · RubyGems
mozilla-mobile/android-components
⚠️ This project moved to a new repository. It is now developed and maintained at: https://github.com/mozilla-mobile/firefox-android
MPL-2.0Sep 11, 2026 · metrics 2.10.0
npm
yishn/tikzcd-editor
A simple visual editor for creating commutative diagrams.
MITOct 19, 2026 · metrics 2.10.0
PyPI
Belval/pdf2image
A python module that wraps the pdftoppm utility to convert PDF to PIL Image object
MITOct 24, 2026 · metrics 2.10.0
npm
Starcounter-Jack/JSON-Patch
Lean and mean Javascript implementation of the JSON-Patch standard (RFC 6902). Update JSON documents using delta patches.
MITSep 17, 2026 · metrics 2.10.0
npm
mikenicholson/passport-jwt
Passport authentication using JSON Web Tokens
MITSep 17, 2026 · metrics 2.10.0
PyPI
ShieldMnt/invisible-watermark
python library for invisible image watermark (blind image watermark)
MITSep 17, 2026 · metrics 2.10.0
PyPI
gotcha/ipdb
Integration of IPython pdb
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
npm
millermedeiros/js-signals
Custom Event/Messaging system for JavaScript inspired by AS3-Signals
No licenseOct 18, 2026 · metrics 2.10.0
PyPI
wkeeling/selenium-wire
Extends Selenium's Python bindings to give you the ability to inspect requests made by the browser.
MITSep 17, 2026 · metrics 2.10.0
npm
flexn-io/renative
🚀🚀🚀 Unified Development Platform for iOS, tvOS, Android, Android TV, Android Wear, Web, Tizen TV, Tizen Watch, Tizen Mobile, LG webOS, macOS/OSX, Windows, KaiOS, FirefoxOS Firefox TV platforms
MITOct 23, 2026 · metrics 2.10.0
Go
tjfoc/gmsm
GM SM2/3/4 library based on Golang (基于Go语言的国密SM2/SM3/SM4算法库)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
facebook/fbjs
A collection of utility libraries used by other Meta JS projects.
MITSep 17, 2026 · metrics 2.10.0
PyPI
woct0rdho/triton-windows
Fork of the Triton language and compiler for Windows support and easy installation
MITSep 17, 2026 · metrics 2.10.0
npm
mafintosh/why-is-node-running
Node is running but you don't know why? why-is-node-running is here to help you.
MITSep 16, 2026 · metrics 2.10.0
PyPI
petertodd/python-bitcoinlib
Python3 library providing an easy interface to the Bitcoin data structures and protocol.
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
cherrypy/cherrypy
CherryPy is a pythonic, object-oriented HTTP framework. https://cherrypy.dev
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
nbubna/store
A better way to use localStorage and sessionStorage
MITSep 17, 2026 · metrics 2.10.0
Go
mochi-mqtt/server
The fully compliant, embeddable high-performance Go MQTT v5 server for IoT, smarthome, and pubsub
MITSep 20, 2026 · metrics 2.10.0