Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,667
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
gettalong/kramdown
kramdown is a fast, pure Ruby Markdown superset converter, using a strict syntax definition and supporting several common extensions.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
medikoo/memoizee
Complete memoize/cache solution for JavaScript
ISCSep 17, 2026 · metrics 2.10.0
npm
Noovolari/leapp
Leapp is the DevTool to access your cloud
MPL-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
requests/requests-oauthlib
OAuthlib support for Python-Requests!
ISCOct 23, 2026 · metrics 2.10.0
PyPI
django-money/django-money
Money fields for Django forms and models.
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
octo-models/octo
Octo is a transformer-based robot policy trained on a diverse mix of 800k robot trajectories.
MITSep 14, 2026 · metrics 2.10.0
PyPI
danielgtaylor/python-betterproto
Clean, modern, Python 3.6+ code generator & library for Protobuf 3 and async gRPC
MITSep 17, 2026 · metrics 2.10.0
RubyGems
fphilipe/premailer-rails
CSS styled emails without the hassle.
MITSep 11, 2026 · metrics 2.10.0
npm
indutny/elliptic
Fast Elliptic Curve Cryptography in plain javascript
No licenseSep 17, 2026 · metrics 2.10.0
Go
SpatiumPortae/portal
Portal is a quick and easy command-line file transfer utility from any computer to another 🌌 ✨
MITOct 19, 2026 · metrics 2.10.0
—
OpenNebula/one
The open source Cloud & Edge Computing Platform bringing real freedom to your Enterprise Cloud 🚀
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
mpdavis/python-jose
A JOSE implementation in Python
MITOct 23, 2026 · metrics 2.10.0
crates.io
cnosdb/cnosdb
A cloud-native open source distributed time series database with high performance, high compression ratio and high availability.
AGPL-3.0Sep 15, 2026 · metrics 2.10.0
npm
phosphor-icons/react
A flexible icon family for React
MITSep 17, 2026 · metrics 2.10.0
npm
que-etc/resize-observer-polyfill
A polyfill for the Resize Observer API
MITSep 17, 2026 · metrics 2.10.0
npm
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
ISCSep 16, 2026 · metrics 2.10.0
crates.io
queer/boxxy
boxxy puts bad Linux applications in a box with only their files.
MITOct 23, 2026 · metrics 2.10.0
Go
grafana-cold-storage/agent
Vendor-neutral programmable observability pipelines.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
gorilla/handlers
Package gorilla/handlers is a collection of useful middleware for Go HTTP services & web applications 🛃
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
PyPI
rspeer/wordfreq
Access a database of word frequencies, in various natural languages.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
tj/mmake
Modern Make
No licenseOct 19, 2026 · metrics 2.10.0
npm
rvagg/node-worker-farm
Distribute processing tasks to child processes with an über-simple API and baked-in durability & custom concurrency options.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
WebDevStudios/Custom-Metaboxes-and-Fields-for-WordPress
Lets you easily create metaboxes with custom fields that will blow your mind.
No licenseSep 13, 2026 · metrics 2.10.0
Go
mitchellh/cli
A Go library for implementing command-line interfaces.
MPL-2.0Oct 21, 2026 · metrics 2.10.0
npm
thecodrr/fdir
⚡ The fastest directory crawler & globbing library for NodeJS. Crawls 1m files in < 1s
MITSep 16, 2026 · metrics 2.10.0
npm
lukeed/klona
A tiny (240B to 501B) and fast utility to "deep clone" Objects, Arrays, Dates, RegExps, and more!
MITSep 17, 2026 · metrics 2.10.0
PyPI
google-research/torchsde
Differentiable SDE solvers with GPU support and efficient sensitivity analysis.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
jldbc/pybaseball
Pull current and historical baseball statistics using Python (Statcast, Baseball Reference, FanGraphs)
MITSep 17, 2026 · metrics 2.10.0
npm
eykrehbein/strest
⚡️ CI-ready tests for REST APIs configured in YAML
MITSep 14, 2026 · metrics 2.10.0
—
EnterpriseDB/repmgr
A lightweight replication manager for PostgreSQL (Postgres)
Custom licenseSep 20, 2026 · metrics 2.10.0