Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,229
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITSep 16, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
AgustinBanchio/go-limit
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
Go
Aleksey512/swarm-hpa
Horizontal autoscaling, stuck-task healing, and GitOps stack deploy for Docker Swarm — opt-in, dry-run by default.
MITSep 19, 2026 · metrics 2.10.0
RubyGems
DFE-Digital/rspec-retry
Retry randomly failing rspec example. This is an extension to the original gem, that will log flakey tests to an output file.
MITSep 19, 2026 · metrics 2.10.0
Go
ErfanMomeniii/captcha
Lightweight, pure-Go CAPTCHA generator — numeric, alphabetical, mixed, custom, word, math, and audio captchas with verifiable keys, tunable anti-bot noise, and themeable colors.
MITSep 20, 2026 · metrics 2.10.0
Go
Fantom-foundation/go-ethereum-substate
No repository description published.
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
Go
Noooste/fhttp
fhttp
No licenseSep 16, 2026 · metrics 2.10.0
—
Psiphon-Inc/configloader-go
Config loading library for Go
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm · crates.io
RaoFoundation/frontier
Ethereum compatibility layer for Substrate.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
RewithSolo/arcana-gate
A Go-based CI/CD tool that integrates into your pipeline and lets deterministic Tarot logic decide the ultimate fate of your release.
MITSep 20, 2026 · metrics 2.10.0
crates.io
RumovZ/android-tzdata
Parser for the Android-specific tzdata file
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
VexoraDevelopment/consolex
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
—
apache/grails-wrapper
Grails Wrapper
No licenseSep 19, 2026 · metrics 2.10.0
npm
bigcommerce/eslint-config
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
Go
bnb-chain/greenfield-bsc-archiver
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
crates.io
cube-js/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
datafuse-extras/msql-srv
Bindings for writing a server that can act as MySQL/MariaDB
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
dpwgc/easierweb
More user-friendly, high performance Go Web framework. ~ 更简单易用的高性能 Go Web 框架
MITSep 19, 2026 · metrics 2.10.0
npm
edsdk/n1ed-react
Official N1ED React component
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
Packagist
ensi-platform/laravel-php-rdkafka-producer
No repository description published.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
es-shims/Array.prototype.findLastIndex
An ESnext spec-compliant `Array.prototype.findLastIndex` shim/polyfill/replacement that works as far down as ES3.
MITSep 16, 2026 · metrics 2.10.0
Go
escoffier-labs/agent-notify
Inside escoffier-labs/brigade (stations/notify). Privacy-first push notifications for AI coding agents to Discord, Telegram, and Signal.
MITSep 18, 2026 · metrics 2.10.0
npm · RubyGems
flossbank/registry-resolver
No repository description published.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
giantswarm/giantswarm-js-client
JavaScript Client for the (deprecated) Giant Swarm REST API
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Packagist
ibexa/templated-uri-bundle
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Packagist
ibexa/templated-uri-router
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
Go
infobloxopen/bloxone-go-client
bloxone-go-client
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
iris-contrib/formBinder
Replaced with: https://github.com/iris-contrib/schema
No licenseSep 19, 2026 · metrics 2.10.0