Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,576
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
qri-io/desktop
Qri Desktop
GPL-3.0Oct 26, 2026 · metrics 2.10.0
—
quiet/quiet-dsp
Digital signal processing library
MITSep 15, 2026 · metrics 2.10.0
—
ssfrr/DeepDiffs.jl
Compute and pretty-print diffs for data structures like arrays and dictionaries
Custom licenseOct 14, 2026 · metrics 2.10.0
npm
titicacadev/triple-config-kit
ESLint, Prettier, Stylelint configuration for TRIPLE
MITJul 19, 2026 · metrics 2.10.0
—
CESNET/ipfixcol
IPFIXcol is an implementation of an IPFIX (RFC 7011) collector
Custom licenseOct 25, 2026 · metrics 2.10.0
—
CiscoDevNet/ansible-meraki
Cisco Meraki Ansible Collection
GPL-3.0Oct 8, 2026 · metrics 2.10.0
Go
ConduitIO/bwlimit
Limit the bandwidth of a connection.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
feross/typedarray-to-buffer
Convert a typed array to a Buffer without a copy.
MITOct 21, 2026 · metrics 2.10.0
—
googleapis/python-language
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-language
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
iamport/iamport-rest-client-nodejs
NodeJS사용자를 위한 아임포트 REST API 연동 모듈입니다.
MITSep 26, 2026 · metrics 2.10.0
RubyGems
kramdown/parser-gfm
kramdown-parser-gfm provides a kramdown parser for the GFM dialect of Markdown
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
matttproud/golang_protobuf_extensions
Support for streaming Protocol Buffer messages for the Go language (golang).
Apache-2.0Sep 14, 2026 · metrics 2.10.0
RubyGems
mocktools/ruby-dns-mock
DNS mock server written on 💎 Ruby. Mimic any DNS records for your test environment with fake DNS server.
MITSep 12, 2026 · metrics 2.10.0
Go
pierrec/xxHash
Pure Go implementation of xxHash (32 and 64 bits versions)
BSD-3-ClauseOct 4, 2026 · metrics 2.10.0
npm
radicle-dev/radicle-contracts
Radicle contracts on Ethereum
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
servicemeshinterface/smi-sdk-go
Service Mesh Interface SDK for Go
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
sindresorhus/is-npm
Check if your code is running as an npm or yarn script
MITSep 15, 2026 · metrics 2.10.0
npm
EasyDynamics/oscal-react-library
A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.
MITSep 10, 2026 · metrics 2.10.0
Go · npm
GridProtectionAlliance/osisoftpi-grafana
Grafana Data Source Plugin for the OSIsoft PI System
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
SirusCodes/AntiLang
An esoteric language with an aim to break all the programming conventions
MITOct 22, 2026 · metrics 2.10.0
crates.io
alexcrichton/scoped-tls
Scoped Thread Local Storage for Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
apache/openwhisk-apigateway
Apache OpenWhisk API Gateway service for exposing actions as REST interfaces.
Apache-2.0Sep 25, 2026 · metrics 2.10.0
PyPI
asottile-archive/flake8-2020
flake8 plugin which checks for misuse of `sys.version` or `sys.version_info`
MITSep 17, 2026 · metrics 2.10.0
PyPI
atdt/monotonic
An implementation of time.monotonic() for Python 2 & Python 3
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Hex
bitwalker/ex_unit_clustered_case
An extension for ExUnit for simplifying tests against a clustered application
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
deepset-ai/haystack-experimental
🧪 Experimental features for Haystack
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
mjackson/resolve-pathname
Resolve URL pathnames using JavaScript
MITSep 23, 2026 · metrics 2.10.0
RubyGems
net-ssh/net-ssh-gateway
A gateway class for tunneling connections via SSH over a forwarded port
MITSep 11, 2026 · metrics 2.10.0
npm
node-fetch/fetch-blob
A Blob implementation in Node.js, originally from node-fetch.
MITSep 15, 2026 · metrics 2.10.0
Maven
subutai-io/peer-os
Subutai is a next generation peer to peer (P2P) cloud computing and Internet of Things platform. Subutai peers collaborate and share resources to create secure virtual environments tying together the shared network and machine resources across peers.
Apache-2.0Sep 13, 2026 · metrics 2.10.0