Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,342
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
weaveworks/policy-library
The policy-as-code library
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
webdriverio-boneyard/wdio-dot-reporter
A WebdriverIO v4 plugin. Report results in dot format.
MITOct 18, 2026 · metrics 2.10.0
npm
weirdpattern/eslint-config-typescript
An opinionated set of ESLint rules for TypeScript projects
MITOct 18, 2026 · metrics 2.10.0
Go
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
MITSep 13, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-decimal
Check if a character is decimal
MITSep 16, 2026 · metrics 2.10.0
Go
x1hy9/Go-cms-scan
一个Go语言创造的cms扫描器
No licenseSep 16, 2026 · metrics 2.10.0
—
xapi-project/stdext
Xenserver's (deprecated) extensions to the ocaml standard library
Custom licenseSep 13, 2026 · metrics 2.10.0
Packagist
yiisoft/psr-dummy-provider
Dummy PSR provider
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
—
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
MITSep 20, 2026 · metrics 2.10.0
npm
zertosh/eslint-plugin-no-async-without-await
Enforce that async functions use await
No licenseOct 18, 2026 · metrics 2.10.0
crates.io
0xMiden/p3-miden
Miden-specific Plonky3-based crates
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Maven
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
Maven
1c-syntax/utils
No repository description published.
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
crates.io
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
AndroidPoet/revenuecat-cli
Fast, lightweight, and scriptable CLI for RevenueCat
MITSep 17, 2026 · metrics 2.10.0
PyPI
B4DCATs/openvpn_exporter
🔒 Secure Prometheus exporter for OpenVPN servers with IP access control, comprehensive monitoring, and Grafana dashboard
Apache-2.0Oct 12, 2026 · metrics 2.10.0
Hex
BrandtHill/Salchicha
An Elixir NaCl/libsodium-lite Salsa20/ChaCha20 encryption tool
MITSep 18, 2026 · metrics 2.10.0
PyPI
CyrusBiotechnology/dj-bioinformatics-protein
Django utilities and tools for protein storage and manipulation
MITOct 22, 2026 · metrics 2.10.0
Go
Delni/preflight
Automate checklist to ensure you are ready to go
MITSep 12, 2026 · metrics 2.10.0
npm · NuGet
DigitalMomentum/Umbraco-Videolizer
A Datatype for pasting in Youtube / Vimeo URLs and embeding them into your site
MITOct 22, 2026 · metrics 2.10.0
npm
DjonnyX/ng-virtual-scroll-view
High-performance virtual scroll container for Angular
MITSep 15, 2026 · metrics 2.10.0
—
EngoEngine/math
Fork of luxengine/math which is now moved
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go
Exeteres/wg-feed
wg-feed is a draft protocol and reference implementation for distributing WireGuard tunnel configurations via subscription URLs
MITSep 12, 2026 · metrics 2.10.0
npm
FallEzz/baileys-corp
Ngapain jir?
No licenseOct 12, 2026 · metrics 2.10.0
—
FastReports/winforms-datavisualization
System.Windows.Forms.DataVisualization provides basic charting for WinForms applications.
MITSep 15, 2026 · metrics 2.10.0
RubyGems
Fodoj/acts-as-taggable-on
A tagging plugin for Rails applications that allows for custom tagging along dynamic contexts.
MITOct 18, 2026 · metrics 2.10.0
RubyGems
KJTsanaktsidis/extconf_compile_commands_json
Generate clangd compile_commands.json files for gems
MITSep 11, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/status-generator
Translation status generator for Laravel Lang projects.
MITOct 20, 2026 · metrics 2.10.0