Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,602
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
Marwes/schemafy
Crate for generating rust types from a json schema
MITAug 25, 2026 · metrics 2.10.0
NuGet
edwardgushchin/SDL3-CS
Modern C# bindings and native NuGet packages for SDL3 and its companion libraries.
ZlibJul 27, 2026 · metrics 2.10.0
crates.io
tokio-rs/valuable
No repository description published.
MITAug 3, 2026 · metrics 2.10.0
Maven
xolstice/protobuf-maven-plugin
Maven Plugin that executes the Protocol Buffers (protoc) compiler
Custom licenseJul 30, 2026 · metrics 2.10.0
NuGet
ferram4/Ferram-Aerospace-Research
Aerodynamics model for Kerbal Space Program
Custom licenseAug 1, 2026 · metrics 2.10.0
RubyGems
ConnorAtherton/rb-readline
Pure-Ruby Readline Implementation
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
Packagist · npm
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
No licenseJul 24, 2026 · metrics 2.10.0
npm
ganesshkumar/obsidian-table-editor
An Obsidian plugin to provide an editor for Markdown tables. It can open CSV data and data from Microsoft Excel, Google Sheets, Apple Numbers and LibreOffice Calc as Markdown tables from Obsidian Markdown editor.
MITAug 28, 2026 · metrics 2.10.0
npm
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
MITAug 4, 2026 · metrics 2.10.0
Maven
philburk/jsyn
Modular audio synthesizer library with unit generators in Java
Apache-2.0Jul 23, 2026 · metrics 2.10.0
npm
sindresorhus/load-json-file
Read and parse a JSON file
MITAug 4, 2026 · metrics 2.10.0
npm
szmarczak/http2-wrapper
Use HTTP/2 the same way like HTTP/1
MITAug 31, 2026 · metrics 2.10.0
PyPI
bxparks/bigquery-schema-generator
Generates the BigQuery schema from newline-delimited JSON or CSV data records.
Apache-2.0Aug 25, 2026 · metrics 2.10.0
npm
consta-design-system/uikit
No repository description published.
MITAug 16, 2026 · metrics 2.10.0
PyPI
blue-oil/blueoil
Bring Deep Learning to small devices
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Go
joomcode/redispipe
High-throughput Redis client for Go with implicit pipelining
MITJul 20, 2026 · metrics 2.10.0
Maven
yandex/yatagan
Dependency Injection framework based on Google's Dagger2 API, optimized for fast builds and for managing large graphs with optional dependencies
Apache-2.0Sep 6, 2026 · metrics 2.10.0
PyPI
coletdjnz/yt-dlp-youtube-oauth2
[OBSOLETE] Plugin that adds OAuth2 login support to yt-dlp's YouTube extractors
UnlicenseJul 27, 2026 · metrics 2.10.0
RubyGems
plaid/plaid-ruby
Ruby bindings for Plaid
MITJul 20, 2026 · metrics 2.10.0
RubyGems
DmitryTsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
MITAug 2, 2026 · metrics 2.10.0
Packagist
TheDragonCode/laravel-deploy-operations
🚀 Performing any actions during the deployment process
MITJul 29, 2026 · metrics 2.10.0
PyPI
rr-/screeninfo
Fetch location and size of physical screens.
Custom licenseAug 22, 2026 · metrics 2.10.0
PyPI
sethmlarson/truststore
Verify certificates using OS trust stores
MITSep 9, 2026 · metrics 2.10.0
PyPI
romis2012/aiohttp-socks
Proxy (HTTP, SOCKS) connector for aiohttp
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm · PyPI
GoogleCloudPlatform/emblem
Archived: Emblem Giving is a sample application that demonstrates a serverless architecture with continuous delivery, and trouble recovery. :diamond_shape_with_a_dot_inside:
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
blockdiag/blockdiag
No repository description published.
Apache-2.0Aug 19, 2026 · metrics 2.10.0
Go
d3fvxl/di
🛠 A full-featured dependency injection container for go programming language.
MITJul 25, 2026 · metrics 2.10.0
Packagist
konnco/filament-import
why import must use a template when you can import all files dynamically?
MITJul 25, 2026 · metrics 2.10.0
npm
karthikv/purview
A server-side component framework. What if your React components ran on the server-side?
MITAug 14, 2026 · metrics 2.10.0
Packagist
sajya/server
Implement the JSON-RPC 2.0 server specification for @Laravel
MITJul 22, 2026 · metrics 2.10.0