Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,864
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
jonschlinkert/object-visit
Call the given method on each value in the given object.
MITSep 15, 2026 · metrics 2.10.0
crates.io · Go
kroma-network/zkevm-circuits
This is a mirror of zkevm-circuits(https://github.com/scroll-tech/zkevm-circuits).
MITSep 18, 2026 · metrics 2.10.0
PyPI
li-plus/rouge-metric
A Python wrapper of the official ROUGE-1.5.5.pl script and a re-implementation of full ROUGE metrics.
MITOct 18, 2026 · metrics 2.10.0
npm
mahdyar/ansi-html-community
An elegant lib that converts the chalked text to HTML.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
octokit/plugin-enterprise-server.js
Octokit plugin for GitHub Enterprise REST APIs
MITSep 16, 2026 · metrics 2.10.0
RubyGems
rvm/executable-hooks
No repository description published.
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
sajya/client
JSON-RPC 2.0 HTTP(S) Client
MITSep 13, 2026 · metrics 2.10.0
NuGet
space-wizards/SpaceWizards.HttpListener
Managed, maintained, updated, and unprofessionally butchered fork of System.Net.HttpListener
MITSep 15, 2026 · metrics 2.10.0
PyPI
spec-first/swagger_ui_bundle
bundled swagger-ui pip package
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
stjohnjohnson/cucumber-junit
Cucumber.js JSON to JUnitXML converter
MITOct 18, 2026 · metrics 2.10.0
—
synpse-hq/synpse
Synpse is an all-in-one solution to manage your servers and IoT devices providing declarative app deployment, SSH access and TCP tunnels
Apache-2.0Oct 26, 2026 · metrics 2.10.0
PyPI
tilezen/tapalcatl-py
A simpler, less configurable Python port of Tapalcatl suitable for AWS Lambda. Extracts vector tiles from ZIP metatiles stored on S3.
MITOct 25, 2026 · metrics 2.10.0
PyPI
yang-zhang/product_category
Product cateogry prediction
No licenseOct 26, 2026 · metrics 2.10.0
Packagist
yiisoft/assets
Assets management
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/cookies
Convenient way to use cookies with PSR-7
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/var-dumper
Helper for dumping variable for debug purposes
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/yii-middleware
Yii-specific middleware
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
Akurganow/use-persisted-state
React useState hook with persistence to localStorage, sessionStorage, and extension storage (chrome.storage / browser.storage)
MITSep 18, 2026 · metrics 2.10.0
npm
CoderPuppy/os-browserify
No repository description published.
MITSep 15, 2026 · metrics 2.10.0
npm
IndigoUnited/js-err-code
Create error instances with a code
No licenseOct 20, 2026 · metrics 2.10.0
Go · PyPI
Mouse-BB-Team/Bot-Detection
Protection of Web applications with behavioral biometrics – bot detection module
MITOct 26, 2026 · metrics 2.10.0
Go
MuratDoganer/seer
No repository description published.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
PGSSoft/terraform-provider-mssql
MS SQL Terraform provider
MITSep 19, 2026 · metrics 2.10.0
—
PacificBiosciences/pbbam
PacBio BAM C++ library
BSD-3-Clause-ClearSep 13, 2026 · metrics 2.10.0
—
TACC/Galaxy
Galaxy is an asynchronous parallel visualization ray tracer for performant rendering in distributed computing environments. Galaxy builds upon Intel OSPRay and Intel Embree, including ray queueing and sending logic inspired by TACC GraviT.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
aboutcode-org/pip-requirements-parser
a mostly correct pip requirements parsing library
MITOct 23, 2026 · metrics 2.10.0
Packagist
adobe/stock-api-libphp
PHP implementation of the Stock APIs
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go · npm
algonius/algonius-browser
MCP browser automation server. Exposes browser control tools to external AI systems via Model Context Protocol. Open-source & secure.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems
arthurnn/code-scanning-rubocop
No repository description published.
MITSep 12, 2026 · metrics 2.10.0
—
aws-ia/terraform-elastic-cloud
Terraform module automates Elastic Cloud deployment and optional data migration to the AWS Cloud.
Apache-2.0Sep 15, 2026 · metrics 2.10.0