Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,101
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
bgrins/TinyColor
Fast, small color manipulation and conversion for JavaScript
MITSep 17, 2026 · metrics 2.10.0
PyPI
pypa/sampleproject
A sample project that exists for PyPUG's "Tutorial on Packaging and Distributing Projects"
MITSep 17, 2026 · metrics 2.10.0
npm
standard-things/esm
Tomorrow's ECMAScript modules today!
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
bukosabino/ta
Technical Analysis Library using Pandas and Numpy
MITSep 17, 2026 · metrics 2.10.0
npm
Marak/colors.js
get colors in your node.js console
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
hashicorp/terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
MPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
kangax/html-minifier
Javascript-based HTML compressor/minifier (with Node.js support)
MITSep 17, 2026 · metrics 2.10.0
PyPI · RubyGems
google/pytype
A static type analyzer for Python code
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
frangoteam/FUXA
Web-based Process Visualization (SCADA/HMI/Dashboard) software
MITSep 18, 2026 · metrics 2.10.0
PyPI
Instagram/MonkeyType
A Python library that generates static type annotations by collecting runtime types
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
googlemaps/google-maps-services-python
Python client library for Google Maps API Web Services
Apache-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
MediaBrowser/Emby
Emby Server is a personal media server with apps on just about every device.
GPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI · npm
dpgaspar/Flask-AppBuilder
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
webpack/mini-css-extract-plugin
Lightweight CSS extraction plugin
MITSep 17, 2026 · metrics 2.10.0
—
stackblitz/webcontainer-core
Dev environments. In your web app.
MITSep 17, 2026 · metrics 2.10.0
crates.io
plotters-rs/plotters
A rust drawing library for high quality data plotting for both WASM and native, statically and realtimely 🦀 📈🚀
MITSep 17, 2026 · metrics 2.10.0
PyPI
pyrogram/pyrogram
Elegant, modern and asynchronous Telegram MTProto API framework in Python for users and bots
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
—
firefox-devtools/debugger
The faster and smarter Debugger for Firefox DevTools 🔥🦊🛠
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
PyImageSearch/imutils
A series of convenience functions to make basic image processing operations such as translation, rotation, resizing, skeletonization, and displaying Matplotlib images easier with OpenCV and Python.
MITSep 17, 2026 · metrics 2.10.0
PyPI
spyoungtech/grequests
Requests + Gevent = <3
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
fixie-ai/ultravox
A fast multimodal LLM for real-time voice
MITSep 18, 2026 · metrics 2.10.0
PyPI
RUCAIBox/RecBole
A unified, comprehensive and efficient recommendation library
MITSep 20, 2026 · metrics 2.10.0
PyPI
spulec/freezegun
Let your Python tests travel through time
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
jonschlinkert/gray-matter
Smarter YAML front matter parser, used by metalsmith, Gatsby, Netlify, Assemble, mapbox-gl, phenomic, vuejs vitepress, TinaCMS, Shopify Polaris, Ant Design, Astro, hashicorp, garden, slidev, saber, sourcegraph, and many others. Simple to use, and battle tested. Parses YAML by default but can also parse JSON Front Matter, Coffee Front Matter, TOML Front Matter, and has support for custom parsers. Please follow gray-matter's author: https://github.com/jonschlinkert
MITSep 17, 2026 · metrics 2.10.0
PyPI
JonathanSalwan/ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
facebook/prop-types
Runtime type checking for React props and similar objects
MITSep 16, 2026 · metrics 2.10.0
npm
pieroxy/lz-string
LZ-based compression algorithm for JavaScript
MITSep 17, 2026 · metrics 2.10.0
PyPI
matplotlib/mplfinance
Financial Markets Data Visualization using Matplotlib
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
DistrictDataLabs/yellowbrick
Visual analysis and diagnostic tools to facilitate machine learning model selection.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
bramstein/fontfaceobserver
Webfont loading. Simple, small, and efficient.
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0