Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,785
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
microsoft/boll
monorepo linting tool
MITAug 3, 2026 · metrics 2.10.0
npm
microsoft/vscode-docker-extensibility
Docker for Visual Studio Code: Extensibility Model
MITJul 21, 2026 · metrics 2.10.0
npm · PyPI
opnfv/samplevnf
Mirror of the OPNFV Sample Virtual Network Function Project
Custom licenseAug 5, 2026 · metrics 2.10.0
npm
request/promise-core
Core Promise support implementation for the simplified HTTP request client 'request'.
ISCAug 2, 2026 · metrics 2.10.0
RubyGems
ruby-syntax-tree/prettier_print
A drop-in replacement for the prettyprint gem with more functionality
MITJul 20, 2026 · metrics 2.10.0
NuGet
space-wizards/SpaceWizards.HttpListener
Managed, maintained, updated, and unprofessionally butchered fork of System.Net.HttpListener
MITAug 2, 2026 · metrics 2.10.0
—
tmdarwen/AudioLib
A C++ library for audio specific components.
No licenseAug 25, 2026 · metrics 2.10.0
Go
vmihailenco/tagparser
Opinionated Golang tag parser
BSD-2-ClauseJul 28, 2026 · metrics 2.10.0
—
wwwlicious/servicestack-seq-requestlogsfeature
Servicestack plugin that logs requests to seq
MPL-2.0Jul 18, 2026 · metrics 2.10.0
npm
yargs/require-main-filename
shim for require.main.filename() that works in as many environments as possible
ISCAug 29, 2026 · metrics 2.10.0
PyPI
Azure/msrestazure-for-python
The runtime library "msrestazure" for AutoRest generated Python clients.
MITJul 21, 2026 · metrics 2.10.0
—
EVerest/libslac
Simple ISO15118-3 SLAC implementation
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Packagist
Guzzle3/stream
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Stream component
No licenseJul 25, 2026 · metrics 2.10.0
PyPI
PavanTatikonda/itypes
Basic immutable container types for Python.
Custom licenseAug 8, 2026 · metrics 2.10.0
PyPI
PennyDreadfulMTG/pystache
Mustache in Python
MITAug 27, 2026 · metrics 2.10.0
Packagist
alexkart/curl-builder
Curl command generator library
MITJul 28, 2026 · metrics 2.10.0
Go
alingse/asasalint
Golang linter, lint pass any slice as any in variadic function
MITAug 4, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
No licenseSep 8, 2026 · metrics 2.10.0
—
emilopezcano/SixSigma
SixSigma R package
No licenseAug 4, 2026 · metrics 2.10.0
PyPI
executablebooks/mdformat-tables
An mdformat plugin for rendering tables
MITJul 18, 2026 · metrics 2.10.0
npm
jonschlinkert/is-extendable
Answers the question: "can this value have keys?". Returns true if a value is any of the object types: array, regexp, plain object, function or date. Useful for determining if a value is an object that can be extended.
MITAug 29, 2026 · metrics 2.10.0
Packagist
m2mtech/flysystem-stream-wrapper
A stream wrapper for Flysystem V2+
MITAug 7, 2026 · metrics 2.10.0
PyPI
sdispater/pytzdata
Official timezone database for Python.
MITAug 8, 2026 · metrics 2.10.0
NuGet · npm
serenity-is/common-features
Contains demo modules and common features shared between Serene and StartSharp
No licenseJul 25, 2026 · metrics 2.10.0
crates.io
servo/core-text-rs
DEPRECATED - Rust bindings for CoreText.
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
spdy-http2/handle-thing
The Thing when you need it
No licenseAug 31, 2026 · metrics 2.10.0
Packagist
superfaktura/apiclient
SuperFaktúra oficiálny PHP-API klient.
MITJul 28, 2026 · metrics 2.10.0
crates.io
swgillespie/unicode-categories
A simple crate that allows for unicode categories can be queried for characters.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Packagist
theofidry/console
Library for creating CLI commands or applications
MITSep 5, 2026 · metrics 2.10.0
Maven
valtimo-platform/valtimo-backend-libraries
Welcome at the Valtimo repository. Valtimo is the less-code platform for Business Process Automation. Built on top of business process orchestrator Camunda. Valtimo's goal is to make implementing business process automation and case management easy. Valtimo is the server side component for business process automation.
Custom licenseJul 16, 2026 · metrics 2.10.0