Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,748
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
yabeda-rb/yabeda
Extendable framework for collecting and exporting metrics from your Ruby application
MITAug 22, 2026 · metrics 2.10.0
npm
noolsjs/nools
Rete based rules engine written in javascript
MITJul 25, 2026 · metrics 2.10.0
—
loresoft/msbuildtasks
The MSBuild Community Tasks Project is an open source project for MSBuild tasks.
BSD-2-ClauseJul 18, 2026 · metrics 2.10.0
RubyGems
weppos/breadcrumbs_on_rails
A simple Ruby on Rails plugin for creating and managing a breadcrumb navigation.
MITJul 22, 2026 · metrics 2.10.0
Maven
dom4j/dom4j
flexible XML framework for Java
Custom licenseJul 30, 2026 · metrics 2.10.0
crates.io
RustCrypto/AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
No licenseAug 6, 2026 · metrics 2.10.0
Packagist
shetabit/payment
simple laravel payment package , supports multiple drivers
MITJul 31, 2026 · metrics 2.10.0
PyPI · npm
djlint/djLint
HTML template formatter and linter for Django, Jinja, Twig, Nunjucks, Handlebars, Liquid, Go templates, Mustache, Tera, Askama and Angular. Formats markup and template syntax together, and lints for accessibility, correctness and style. CLI, pre-commit hook and VS Code extension.
GPL-3.0Aug 27, 2026 · metrics 2.10.0
npm
tracespace/tracespace
⚡️generate beautiful and accurate SVG renders of printed circuit boards
MITJul 23, 2026 · metrics 2.10.0
Maven
uber/uReplicator
Improvement of Apache Kafka Mirrormaker
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Maven
uniVocity/univocity-parsers
uniVocity-parsers is a suite of extremely fast and reliable parsers for Java. It provides a consistent interface for handling different file formats, and a solid framework for the development of new parsers.
Custom licenseAug 21, 2026 · metrics 2.10.0
Maven · Go · npm
operator-framework/java-operator-sdk
Java SDK for building Kubernetes Operators
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Packagist
Incenteev/ParameterHandler
Composer script handling your ignored parameter file
MITJul 25, 2026 · metrics 2.10.0
npm
oozcitak/xmlbuilder-js
An XML builder for node.js
MITAug 31, 2026 · metrics 2.10.0
npm
Adamant-im/adamant
ADAMANT Blockchain Node
GPL-3.0Aug 4, 2026 · metrics 2.10.0
Go
segmentio/asm
Go library providing algorithms optimized to leverage the characteristics of modern CPUs
MIT-0Jul 28, 2026 · metrics 2.10.0
PyPI
google/visqol
Perceptual Quality Estimator for speech and audio
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
sindresorhus/object-assign
ES2015 Object.assign() ponyfill
MITAug 4, 2026 · metrics 2.10.0
npm
eslint/typescript-eslint-parser
An ESLint custom parser which leverages TypeScript ESTree to allow for ESLint to lint TypeScript source code.
Custom licenseJul 19, 2026 · metrics 2.10.0
PyPI
reingart/pyfpdf
Simple PDF generation for Python (FPDF PHP port)
LGPL-3.0Aug 29, 2026 · metrics 2.10.0
PyPI
replicate/replicate-python
Python client for Replicate
Apache-2.0Aug 8, 2026 · metrics 2.10.0
crates.io
oppiliappan/eva
a calculator REPL, similar to bc(1)
MITJul 24, 2026 · metrics 2.10.0
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITAug 4, 2026 · metrics 2.10.0
crates.io
RustCrypto/password-hashes
Password hashing functions / KDFs
No licenseAug 11, 2026 · metrics 2.10.0
Go
uber-go/tally
A Go metrics interface with fast buffered metrics and third party reporters
MITAug 11, 2026 · metrics 2.10.0
Packagist
ramsey/uuid-doctrine
❄️ 🗄️ Allow the use of a ramsey/uuid UUID as Doctrine field type.
MITAug 13, 2026 · metrics 2.10.0
Packagist · RubyGems
bugsnag/bugsnag-laravel
BugSnag notifier for the Laravel PHP framework. Monitor and report Laravel errors.
MITSep 8, 2026 · metrics 2.10.0
NuGet · npm
microsoft/botbuilder-dotnet
Welcome to the Bot Framework SDK for .NET repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using .NET.
MITJul 28, 2026 · metrics 2.10.0
crates.io
facebook/winterfell
A STARK prover and verifier for arbitrary computations
MITJul 31, 2026 · metrics 2.10.0
Hex
pragdave/earmark
Markdown parser for Elixir
Custom licenseJul 18, 2026 · metrics 2.10.0