Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,591
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
Guzzle3/parser
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Parser component. Provides parsing interfaces for Cookies, HTTP messages, and URI Templates
No licenseJul 25, 2026 · metrics 2.10.0
Go
Jille/raft-grpc-leader-rpc
Send gRPCs to your Raft leader
BSD-2-ClauseJul 28, 2026 · metrics 2.10.0
npm
OffCourse/offcourse-next
Repository for open source contribution to the Offcourse platform. Open to Javascript developers of all levels!
MITSep 5, 2026 · metrics 2.10.0
PyPI
VonderVuflya/Yggdrasil
Durable, local-first memory for AI coding agents over MCP — zero-dependency, curated & semantically de-duped, you own the data (SQLite + Markdown). Works with Claude Code, Codex & any MCP host.
AGPL-3.0Jul 20, 2026 · metrics 2.10.0
Go
Zweih/qp
qp - Query Packages. Query installed packages across ecosystems on Linux and macOS.
GPL-3.0Aug 30, 2026 · metrics 2.10.0
—
buildkite/test-collector-ruby
Moved to buildkite/bktest — Buildkite Test Engine collector for Ruby test frameworks
No licenseAug 26, 2026 · metrics 2.10.0
RubyGems
excid3/acts_as_tenant
Easy multi-tenancy for Rails in a shared database setup.
MITJul 26, 2026 · metrics 2.10.0
npm
hughsk/is-typedarray
Detect whether or not an object is a Typed Array
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
jenisys/parse_type
parse_type extends the "parse" module (opposite of "string.format()")
MITAug 27, 2026 · metrics 2.10.0
crates.io · Go
kroma-network/zkevm-circuits
This is a mirror of zkevm-circuits(https://github.com/scroll-tech/zkevm-circuits).
MITAug 16, 2026 · metrics 2.10.0
npm
mahdyar/ansi-html-community
An elegant lib that converts the chalked text to HTML.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
octokit/plugin-enterprise-server.js
Octokit plugin for GitHub Enterprise REST APIs
MITAug 4, 2026 · metrics 2.10.0
Packagist
sajya/client
JSON-RPC 2.0 HTTP(S) Client
MITJul 22, 2026 · metrics 2.10.0
Packagist
yiisoft/assets
Assets management
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/cookies
Convenient way to use cookies with PSR-7
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/var-dumper
Helper for dumping variable for debug purposes
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/yii-middleware
Yii-specific middleware
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
IndigoUnited/js-err-code
Create error instances with a code
No licenseAug 29, 2026 · metrics 2.10.0
Go
MuratDoganer/seer
No repository description published.
Apache-2.0Sep 7, 2026 · metrics 2.10.0
—
OpenMiNET/OpenMiNET
Custom MiNET Plugin API - Making it easier for multiple plugins to work together nicely.
LGPL-3.0Aug 5, 2026 · metrics 2.10.0
—
PacificBiosciences/pbbam
PacBio BAM C++ library
BSD-3-Clause-ClearJul 26, 2026 · metrics 2.10.0
—
TACC/Galaxy
Galaxy is an asynchronous parallel visualization ray tracer for performant rendering in distributed computing environments. Galaxy builds upon Intel OSPRay and Intel Embree, including ray queueing and sending logic inspired by TACC GraviT.
Apache-2.0Aug 6, 2026 · metrics 2.10.0
Packagist
aVadim483/fast-excel-templator
Lightweight and very fast Excel Spreadsheet generator from XLSX-templates in PHP
MITJul 25, 2026 · metrics 2.10.0
PyPI
aboutcode-org/pip-requirements-parser
a mostly correct pip requirements parsing library
MITSep 9, 2026 · metrics 2.10.0
—
aws-ia/terraform-elastic-cloud
Terraform module automates Elastic Cloud deployment and optional data migration to the AWS Cloud.
Apache-2.0Aug 1, 2026 · metrics 2.10.0
Hex
binaryseed/new_relic_absinthe
Absinthe Instrumentation for the New Relic Elixir Agent
Apache-2.0Jul 18, 2026 · metrics 2.10.0
Go
binbandit/sage
Burning away Git complexity
MITAug 17, 2026 · metrics 2.10.0
Packagist
captainhook-git/plugin-composer
A composer-Plugin to easily use CaptainHook
MITAug 4, 2026 · metrics 2.10.0
npm
cockroachdb/ui
Published assets for Cockroach Labs user interfaces
MITJul 17, 2026 · metrics 2.10.0
Maven
crashinvaders/gdx-lml
:octocat: LibGDX utility libraries.
Apache-2.0Sep 3, 2026 · metrics 2.10.0