Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,573
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
para-cms/para
Rails complete admin interface builder
MITOct 21, 2026 · metrics 2.10.0
PyPI
pybamm-team/pybammsolvers
C/C++ solvers used by PyBaMM, and their Python bindings
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
crates.io
rust-bitcoin/bitcoin-payment-instructions
This Repo Has Been Migrated
No licenseSep 13, 2026 · metrics 2.10.0
crates.io
rust-lang/rustc-stable-hash
A stable hashing algorithm used by rustc: cross-platform, deterministic, not secure
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
sid-krish/rhometa
metagenome population recombination rate estimation pipeline
MITSep 13, 2026 · metrics 2.10.0
RubyGems
socketry/metrics
No repository description published.
MITSep 10, 2026 · metrics 2.10.0
PyPI
sphinx-contrib/jquery
Extension to include jQuery on newer Sphinx releases
0BSDOct 24, 2026 · metrics 2.10.0
RubyGems
sputnik8/atol-rb
ATOL KaaS client for Ruby
MITSep 14, 2026 · metrics 2.10.0
npm
streamich/hyperdyperid
Very fast base-36 ID generator and random integer generator for Node.js
MITSep 15, 2026 · metrics 2.10.0
crates.io
suborbital/javy
JS to WebAssembly toolchain
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
tohtamysh/laravel-phpbb-bridge
Authentication module for Laravel 5.4 and phpBB 3.2
MITSep 25, 2026 · metrics 2.10.0
RubyGems
turbolinks/turbolinks-source-gem
Turbolinks JavaScript assets, packaged as a RubyGem
MITSep 11, 2026 · metrics 2.10.0
npm
tympanix/supper
A blazingly fast multimedia manager
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
valory-xyz/IEKit
An autonomous service implementing a decentralized Impact Evaluator
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
wooorm/bail
Throw if given an error
MITSep 16, 2026 · metrics 2.10.0
Go
ykadowak/zerologlint
Linter that detects the wrong usage of zerolog that a user forgets to dispatch zerolog.Event.
MITSep 16, 2026 · metrics 2.10.0
Packagist
yokai-php/batch
Job with batch processing and more for PHP
MITOct 22, 2026 · metrics 2.10.0
Packagist · npm
zoonru/rialto
Manage Node resources with PHP
MITSep 15, 2026 · metrics 2.10.0
PyPI
Benardi/touvlo
:robot: ML algorithms implemented from scratch and provided block by block
MITOct 23, 2026 · metrics 2.10.0
NuGet
Calabonga/Calabonga.AspNetCore.AppDefinitions
Application Definitions base classes. The small but very helpful packege that can help you to organize your ASP.NET Core application.
MITOct 20, 2026 · metrics 2.10.0
—
ClickHouse/NuRaft
C++ implementation of Raft core logic as a replication library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
CycloneDX/cdxgen-action
GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products
MITSep 13, 2026 · metrics 2.10.0
—
DetroitApps/RetroMultiManager
Manage your Dofus Retro accounts
GPL-3.0Sep 15, 2026 · metrics 2.10.0
Maven
FDio/archived-honeycomb
No repository description published.
No licenseOct 25, 2026 · metrics 2.10.0
Maven
JohnLCaron/electionguard-java
A port of electionguard-python to Java.
MITSep 14, 2026 · metrics 2.10.0
—
Pro/mdnsd
Jeremie Miller's original mdnsd
BSD-3-ClauseOct 25, 2026 · metrics 2.10.0
Go
VKCOM/statshouse-go
StatsHouse client library for Go
MPL-2.0Sep 19, 2026 · metrics 2.10.0
npm
ajv-validator/ajv-draft-04
Ajv JSON validator for JSON Schema draft-04
MITSep 15, 2026 · metrics 2.10.0
npm · Maven
aml-org/amf
AMF (AML Modeling Framework) is an open-source library capable of parsing and validating AML metadata documents.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
amodemoli/fastic
Fastic is web framewok, powered by fasthttp and golang.
MITSep 14, 2026 · metrics 2.10.0