Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,518
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
andylokandy/arraydeque
A circular buffer with fixed capacity (Rust).
MITAug 13, 2026 · metrics 2.10.0
crates.io
japaric/syscall.rs
Raw system calls for Rust
Custom licenseJul 31, 2026 · metrics 2.10.0
Maven
spinnaker/keel
Spinnaker's declarative service
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
aresponses/aresponses
Asyncio http mocking. Similar to the responses library used for 'requests'
MITJul 30, 2026 · metrics 2.10.0
RubyGems
chef-boneyard/chef-api
DEPRECATED: A tiny Chef API client with minimal dependencies
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
dask/partd
Concurrent appendable key-value storage
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
jonschlinkert/isobject
Is the value an object, and not an array or null?
MITAug 4, 2026 · metrics 2.10.0
Packagist
prismicio-community/php-kit
Community maintained development kit for Prismic and the PHP language
Custom licenseJul 28, 2026 · metrics 2.10.0
npm
sindresorhus/hard-rejection
Make unhandled promise rejections fail hard right away instead of the default silent fail
MITAug 31, 2026 · metrics 2.10.0
npm
pyth-network/pyth-client-js
Javascript API for on-chain pyth account structure
Apache-2.0Jul 22, 2026 · metrics 2.10.0
npm
sindresorhus/is-plain-obj
Check if a value is a plain object
MITAug 4, 2026 · metrics 2.10.0
Packagist
aVadim483/fast-excel-reader
Lightweight and very fast XLSX Excel Spreadsheet and CSV Reader in PHP
MITSep 5, 2026 · metrics 2.10.0
PyPI
kafka-python-ng/kafka-python-ng
Fork for Python client for Apache Kafka
Apache-2.0Aug 8, 2026 · metrics 2.10.0
PyPI
lkreidberg/batman
Fast transit light curves models in Python.
GPL-3.0Sep 6, 2026 · metrics 2.10.0
Packagist
rectorphp/type-perfect
Next level type declaration check PHPStan rules
MITAug 22, 2026 · metrics 2.10.0
—
JuliaLang/Tokenize.jl
Tokenization for Julia source code
Custom licenseJul 22, 2026 · metrics 2.10.0
Go
Kong/kong-operator
Kubernetes Operator for Kong Gateways
Apache-2.0Jul 20, 2026 · metrics 2.10.0
crates.io
RustCrypto/KDFs
Collection of Key Derivation Functions written in pure Rust
No licenseAug 8, 2026 · metrics 2.10.0
Hex
balance-platform/pillar
Elixir library client for work with ClickHouse
No licenseJul 20, 2026 · metrics 2.10.0
PyPI
brainets/frites
Framework for Information Theoretical analysis of Electrophysiological data and Statistics
BSD-3-ClauseAug 25, 2026 · metrics 2.10.0
npm
cjihrig/credit-card
Credit card validation
MITJul 24, 2026 · metrics 2.10.0
npm
dawsbot/config-chain
Handle configuration once and for all
MITAug 22, 2026 · metrics 2.10.0
RubyGems
dylanahsmith/ar_transaction_changes
Store transaction changes for active record objects
MITJul 20, 2026 · metrics 2.10.0
npm
hipstersmoothie/obsidian-plugin-prettier
Format obsidian.md notes using prettier
No licenseJul 26, 2026 · metrics 2.10.0
PyPI
intel/torch-ccl
oneCCL Bindings for Pytorch* (deprecated)
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
npm
jensyt/imurmurhash-js
An incremental implementation of MurmurHash3 for JavaScript
MITAug 4, 2026 · metrics 2.10.0
PyPI
langchain-ai/langchain-experimental
⚠️ No longer maintained, see linked issue
MITJul 30, 2026 · metrics 2.10.0
npm
wkillerud/some-sass
Language server with improved support for SCSS, Sass indented and SassDoc. Workspace awareness and full support for Sass modules.
No licenseJul 29, 2026 · metrics 2.10.0
PyPI
Drekin/win-unicode-console
A Python package to enable Unicode support when running Python from Windows console.
MITAug 11, 2026 · metrics 2.10.0
npm
RedKenrok/node-audiorecorder
Audio recorder for Node.js, delivers a 16-bit signed-integer linear pulse modulation WAV stream.
MITAug 4, 2026 · metrics 2.10.0