Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,878
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
yiisoft/error-handler
Framework independent advanced error handler
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/log-target-file
Yii Logging Library - File Target
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/proxy
General purpose proxy
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Maven
ytsaurus/ytsaurus-spyt
YTsaurus SPYT provides an integration with Apache Spark
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
3F/7z.Libs
📦📦 🗜 An automated build of the `7z.Libs` NuGet packages.
MITSep 17, 2026 · metrics 2.10.0
Packagist
Guzzle3/parser
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Parser component. Provides parsing interfaces for Cookies, HTTP messages, and URI Templates
No licenseSep 13, 2026 · metrics 2.10.0
Hex
HGInsights/avalanche
Avalanche is an Elixir Snowflake Connector built on top of the Snowflake SQL API v2.
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm
Hack23/cia-compliance-manager
The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality of their systems and data based on customizable security levels, providing real-time cost estimates, business impact assessments, and technical implementation details.
Apache-2.0Oct 25, 2026 · metrics 2.10.0
Go
Jille/raft-grpc-leader-rpc
Send gRPCs to your Raft leader
BSD-2-ClauseSep 14, 2026 · metrics 2.10.0
npm
OffCourse/offcourse-next
Repository for open source contribution to the Offcourse platform. Open to Javascript developers of all levels!
MITOct 21, 2026 · metrics 2.10.0
—
OpenMiNET/OpenMiNET
Custom MiNET Plugin API - Making it easier for multiple plugins to work together nicely.
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
SocketSomeone/cent.js
👀 Javascript library to communicate with Centrifugo HTTP API
MITOct 10, 2026 · metrics 2.10.0
npm
SocketSomeone/nestjs-hot-shots
🐶 Hot-shots Module for Nest.js Framework
MITOct 9, 2026 · metrics 2.10.0
PyPI
VonderVuflya/Yggdrasil
Durable, local-first memory for AI coding agents over MCP — zero-dependency, curated & semantically de-duped, you own the data (SQLite + Markdown). Works with Claude Code, Codex & any MCP host.
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
Go
Zweih/qp
qp - Query Packages. Query installed packages across ecosystems on Linux and macOS.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
—
buildkite/test-collector-ruby
Moved to buildkite/bktest — Buildkite Test Engine collector for Ruby test frameworks
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
cronofy/cronofy-php
Cronofy PHP library
MITSep 12, 2026 · metrics 2.10.0
crates.io
dapper91/ext-sort-rs
rust external sort algorithm implementation
UnlicenseSep 27, 2026 · metrics 2.10.0
PyPI
dfm/kepler.py
Fast and stable solver for Kepler's equation in Python
MITOct 22, 2026 · metrics 2.10.0
—
diepthihoang/mpboot
MPBoot: Fast phylogenetic maximum parsimony tree inference and bootstrap approximation
GPL-2.0Sep 11, 2026 · metrics 2.10.0
Packagist
elastic/elastic-transport-php
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
RubyGems
excid3/acts_as_tenant
Easy multi-tenancy for Rails in a shared database setup.
MITSep 13, 2026 · metrics 2.10.0
RubyGems
faye/permessage-deflate-ruby
Per-message DEFLATE compression extension for WebSocket connections
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
garyb/purescript-indexed-monad
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
npm
here-be/snapdragon-util
Utilities for the snapdragon parser/compiler.
MITSep 15, 2026 · metrics 2.10.0
PyPI
intertwine/observational-memory
Local-first shared memory for Claude Code, Codex, OpenCode, Kimi, Grok, Cowork, and Hermes, with bounded observation and searchable Markdown context.
MITSep 11, 2026 · metrics 2.10.0
Go
irdkwmnsb/webrtc-grabber
Grabber application for stealthily peeking at other computer's screens
MITOct 21, 2026 · metrics 2.10.0
npm
isaacs/pseudomap
Like `new Map` but for older JavaScripts
BlueOak-1.0.0Sep 15, 2026 · metrics 2.10.0
PyPI
jenisys/parse_type
parse_type extends the "parse" module (opposite of "string.format()")
MITOct 24, 2026 · metrics 2.10.0
npm
jonschlinkert/define-property
Define a non-enumerable property on an object.
MITSep 15, 2026 · metrics 2.10.0