Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,398
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
mafintosh/mkdirp-classic
Mirror of mkdirp 0.5.2
MITOct 21, 2026 · metrics 2.10.0
—
mailhog/data
MailHog data library
MITOct 18, 2026 · metrics 2.10.0
—
maplibre/maplibre-native-base
MapLibre Native Base C++ Libraries
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go
michaelrampl/commity
Make writing commit messages fun again.
No licenseOct 20, 2026 · metrics 2.10.0
RubyGems
microsoft/kiota-serialization-json-ruby
Kiota serialization provider implementation for Ruby and JSON
MITOct 19, 2026 · metrics 2.10.0
RubyGems
mikedll/cknife
Ruby Gem with misc. command line utilities.
MITOct 20, 2026 · metrics 2.10.0
PyPI
tjdwls101010/IBD-RS-Rating
No repository description published.
MITOct 22, 2026 · metrics 2.10.0
RubyGems
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
MITOct 20, 2026 · metrics 2.10.0
PyPI
zopefoundation/zope.deprecation
No repository description published.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
HubSpotWebTeam/wt-eslint-browser
This is a list of ESLint rules that are recommended for use with Hubspot Marketing WebTeam projects.
No licenseOct 21, 2026 · metrics 2.10.0
Go
K-Phoen/sdk
Library for using Grafana' structures in Go programs and client for Grafana REST API.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go · npm
Polymarket/s3x
s3x is a fork of minio providing an S3 API powered by TemporalX that uses IPFS as the data storage layer. It lets you turn any S3 application into an IPFS application with no change in application design
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist
beluga-php/docker-php-api
Docker API generated files from OpenAPI Specification
MITOct 21, 2026 · metrics 2.10.0
npm
cerebris/klassy.js
A class system featuring mixins, constructors, and superclass access.
MITOct 18, 2026 · metrics 2.10.0
npm
cityssm/get-canadian-bank-name
A simple library to translate Canadian bank institution and transit numbers into the corresponding bank names.
MITOct 22, 2026 · metrics 2.10.0
Maven
codehaus-plexus/plexus-cipher
No repository description published.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
colt3k/utils
Numerous utility libraries and tools
MITOct 21, 2026 · metrics 2.10.0
—
dials/dxtbx
Diffraction Experiment Toolbox
No licenseOct 18, 2026 · metrics 2.10.0
PyPI
dpep/py_classproperties
Class properties made easy-er
MITOct 18, 2026 · metrics 2.10.0
crates.io
dtolnay/serde-json
Strongly typed JSON library for Rust
Apache-2.0Oct 23, 2026 · metrics 2.10.0
NuGet
elmahio/elmah.io.log4net
log4net appender for elmah.io
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
exoplanet-dev/case-studies
exoplanet | case studies
MITOct 22, 2026 · metrics 2.10.0
Go
go-fed/oauth2
OAuth 2.0 server library for the Go programming language.
MITOct 21, 2026 · metrics 2.10.0
npm · PyPI
hintjens/zyre
Zyre - an open-source framework for proximity-based peer-to-peer applications
MPL-2.0Oct 21, 2026 · metrics 2.10.0
—
hintjens/zyre-nodejs
Zyre binding for Node.js
No licenseOct 21, 2026 · metrics 2.10.0
Go
jcmturner/dnsutils
No repository description published.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
kairos-io/kairos-sdk
:open_file_folder: golang sdk for kairos
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
kostyaten/go-rss
RSS 2.0 Parser
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
livingdocsIO-archive/livingdocs-cli
Livingdocs CLI Utility -> moved to https://github.com/livingdocsIO/customer-solutions
No licenseOct 21, 2026 · metrics 2.10.0
crates.io
lu-zero/noop_proc_macro
Does nothing with style
MITOct 20, 2026 · metrics 2.10.0