Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,324
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
IndigoUnited/node-promise-retry
Retries a function that returns a promise, leveraging the power of the retry module.
MITOct 20, 2026 · metrics 2.10.0
Maven
trustin/os-maven-plugin
A Maven plugin that sets various useful properties detected from ${os.name} and ${os.arch} properties.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
visionmedia/batch
Simple async batch with concurrency control and progress reporting
MITOct 20, 2026 · metrics 2.10.0
Maven
trautonen/coveralls-maven-plugin
Maven plugin for submitting Java code coverage reports to Coveralls web service.
MITOct 20, 2026 · metrics 2.10.0
—
syncthing/discosrv
The Syncthing global discovery server
No licenseOct 19, 2026 · metrics 2.10.0
npm
mysticatea/abort-controller
An implementation of WHATWG AbortController interface.
MITOct 20, 2026 · metrics 2.10.0
Go
nix-community/gomod2nix
Convert applications using Go modules to Nix expressions [maintainer=@marcusramberg]
MITOct 22, 2026 · metrics 2.10.0
PyPI
miyakogi/m2r
Markdown to reStructuredText converter
MITOct 19, 2026 · metrics 2.10.0
PyPI
requests/requests-kerberos
An authentication handler for using Kerberos with Python Requests.
Custom licenseOct 19, 2026 · metrics 2.10.0
—
modern-go/concurrent
concurrency utilities
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Maven
NASAWorldWind/WorldWindAndroid
The NASA WorldWind Java SDK for Android (WWA) includes the library, examples and tutorials for building 3D virtual globe applications for phones and tablets.
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist · npm
craftcms/contact-form
Add a simple contact form to your Craft CMS site.
MITOct 16, 2026 · metrics 2.10.0
Maven
diffplug/durian
Guava's spikier (unofficial) cousin
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
sffjunkie/astral
Python calculations for the position of the sun and moon.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
ramonhagenaars/jsons
🐍 A Python lib for (de)serializing Python objects to/from JSON
MITOct 19, 2026 · metrics 2.10.0
Go
omegion/ssh-manager
SSH Key Manager for 1Password, Bitwarden and AWS S3.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
—
flyerhq/flutter_firebase_chat_core
Actively maintained, community-driven Firebase BaaS for chat applications with an optional chat UI.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
probe-rs/cargo-embed
a cargo extension for working with microcontrollers
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
ray-project/deltacat
A portable Multimodal Lakehouse powered by Ray that brings exabyte-level scalability and fast, ACID-compliant, change-data-capture to your ML and analytics workloads.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist
wapmorgan/UnifiedArchive
UnifiedArchive - an archive manager with unified interface for different formats (bundled with cli utility). Supports all formats with basic operations (reading, extracting and creation) and popular formats specific features (compression level, password-protection, comment)
MITOct 19, 2026 · metrics 2.10.0
Go
mitchellh/colorstring
Go (golang) library for colorizing strings for terminal output.
MITOct 21, 2026 · metrics 2.10.0
PyPI
a-r-j/ProteinWorkshop
Benchmarking framework for protein representation learning. Includes a large number of pre-training and downstream task datasets, models and training/task utilities. (ICLR 2024)
MITOct 22, 2026 · metrics 2.10.0
—
syncthing/relaysrv
The Syncthing relay server
No licenseOct 19, 2026 · metrics 2.10.0
Go
phpdave11/gofpdf
A PDF document generator with high level support for text, drawing and images
MITOct 18, 2026 · metrics 2.10.0
—
mwitkow/go-conntrack
Go middleware for net.Conn tracking (Prometheus/trace)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
BioJulia/Bio.jl
[DEPRECATED] Bioinformatics and Computational Biology Infrastructure for Julia
MITOct 18, 2026 · metrics 2.10.0
npm
tomchentw/unused-files-webpack-plugin
Glob all files that are not compiled by webpack under webpack's context
MITOct 18, 2026 · metrics 2.10.0
npm
HMS-Core/hms-react-native-plugin
This repo contains all of React-Native HMS plugins.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Maven
os72/protoc-jar-maven-plugin
Protocol Buffers protobuf maven plugin - based on protoc-jar multi-platform executable protoc JAR
Apache-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
railsware/rack_session_access
Rack middleware that provides access to rack.session environment
MITOct 20, 2026 · metrics 2.10.0