Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,930
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
composer/package-versions-deprecated
:package: Composer addon to efficiently get installed packages' version numbers
MITOct 24, 2026 · metrics 2.10.0
PyPI
sigsep/open-unmix-pytorch
Open-Unmix - Music Source Separation for PyTorch
MITSep 17, 2026 · metrics 2.10.0
RubyGems
steveklabnik/request_store
Per-request global storage for Rack.
MITSep 11, 2026 · metrics 2.10.0
npm
ricmoo/aes-js
A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.
MITSep 17, 2026 · metrics 2.10.0
npm
scottie1984/swagger-ui-express
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
MITSep 17, 2026 · metrics 2.10.0
RubyGems
facebookarchive/facebook-swift-sdk
Integrate your iOS apps in Swift with Facebook Platform.
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
google/gofuzz
Fuzz testing for go.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
mitchellh/go-ps
Find, list, and inspect processes from Go (golang).
MITSep 14, 2026 · metrics 2.10.0
RubyGems
brianmario/yajl-ruby
A streaming JSON parsing and encoding library for Ruby (C bindings to yajl)
MITSep 12, 2026 · metrics 2.10.0
PyPI
erikrose/blessings
A thin, practical wrapper around terminal capabilities in Python
MITSep 17, 2026 · metrics 2.10.0
PyPI
lidatong/dataclasses-json
Easily serialize Data Classes to and from JSON
MITSep 12, 2026 · metrics 2.10.0
RubyGems
slack-notifier/slack-notifier
A simple wrapper for posting to slack channels
MITSep 14, 2026 · metrics 2.10.0
npm
element-hq/element-desktop
A glossy Matrix collaboration client for desktop.
AGPL-3.0Sep 11, 2026 · metrics 2.10.0
npm · RubyGems
prettier/plugin-ruby
Prettier Ruby Plugin
MITSep 11, 2026 · metrics 2.10.0
NuGet
Mpdreamz/shellprogressbar
ShellProgressBar - display progress in your console application
MITSep 11, 2026 · metrics 2.10.0
PyPI
CamDavidsonPilon/lifetimes
Lifetime value in Python
MITSep 17, 2026 · metrics 2.10.0
PyPI
google-deepmind/jraph
A Graph Neural Network Library in Jax
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
puleos/object-hash
Generate hashes from javascript objects in node and the browser.
MITSep 17, 2026 · metrics 2.10.0
RubyGems
technicalpickles/jeweler
Opinionated tool for creating and managing Rubygem projects
MITOct 20, 2026 · metrics 2.10.0
PyPI
mmatl/pyrender
Easy-to-use glTF 2.0-compliant OpenGL renderer for visualization of 3D scenes.
MITSep 17, 2026 · metrics 2.10.0
npm
lukeed/dequal
A tiny (304B to 489B) utility to check for deep equality
MITSep 16, 2026 · metrics 2.10.0
NuGet
mono/taglib-sharp
Library for reading and writing metadata in media files
LGPL-2.1Sep 12, 2026 · metrics 2.10.0
Packagist
roach-php/core
The complete web scraping toolkit for PHP.
No licenseSep 14, 2026 · metrics 2.10.0
PyPI
airbnb/binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
peterbourgon/diskv
A disk-backed key-value store.
MITSep 14, 2026 · metrics 2.10.0
npm
scroll-into-view/scroll-into-view-if-needed
Element.scrollIntoView ponyfills for things like "if-needed" and "smooth"
MITSep 17, 2026 · metrics 2.10.0
crates.io
ferrilab/bitvec
A crate for managing memory bit by bit
MITSep 17, 2026 · metrics 2.10.0
npm
sezna/nps
NPM Package Scripts -- All the benefits of npm scripts without the cost of a bloated package.json and limits of json
MITSep 13, 2026 · metrics 2.10.0
PyPI
lepture/flask-oauthlib
YOU SHOULD USE https://github.com/lepture/authlib
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Packagist
bovigo/vfsStream
vfsStream is a stream wrapper for a virtual file system that may be helpful in unit tests to mock the real file system. It can be used with any unit test framework, like PHPUnit or SimpleTest.
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0