Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,759
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITAug 4, 2026 · metrics 2.10.0
Go
uber-go/tally
A Go metrics interface with fast buffered metrics and third party reporters
MITAug 11, 2026 · metrics 2.10.0
Packagist
ramsey/uuid-doctrine
❄️ 🗄️ Allow the use of a ramsey/uuid UUID as Doctrine field type.
MITAug 13, 2026 · metrics 2.10.0
Packagist · RubyGems
bugsnag/bugsnag-laravel
BugSnag notifier for the Laravel PHP framework. Monitor and report Laravel errors.
MITSep 8, 2026 · metrics 2.10.0
NuGet · npm
microsoft/botbuilder-dotnet
Welcome to the Bot Framework SDK for .NET repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using .NET.
MITJul 28, 2026 · metrics 2.10.0
crates.io
facebook/winterfell
A STARK prover and verifier for arbitrary computations
MITJul 31, 2026 · metrics 2.10.0
Hex
pragdave/earmark
Markdown parser for Elixir
Custom licenseJul 18, 2026 · metrics 2.10.0
—
UniSecurityGuard/UniSecurityGuard
本科华五，曾赴美qs50读博，某兄弟院校副教授，校园门卫亭女性主理人，为防止炸号的备份平台，是本人。
No licenseJul 21, 2026 · metrics 2.10.0
Packagist
microsoft/tolerant-php-parser
An early-stage PHP parser designed for IDE usage scenarios.
MITAug 21, 2026 · metrics 2.10.0
Go
nytimes/gziphandler
Go middleware to gzip HTTP responses
Apache-2.0Aug 29, 2026 · metrics 2.10.0
RubyGems · npm
aviflombaum/shadcn-rails
No repository description published.
MITJul 27, 2026 · metrics 2.10.0
npm
estools/esquery
ECMAScript AST query library.
Custom licenseAug 4, 2026 · metrics 2.10.0
NuGet
NModbus4/NModbus4
NModbus4 is a C# implementation of the Modbus protocol. This project is archived in favor of https://github.com/NModbus/NModbus
MITJul 18, 2026 · metrics 2.10.0
PyPI
jazzband/django-nose
Django test runner using nose
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
npm
beatgammit/base64-js
Base64 encoding/decoding in pure JS
MITAug 4, 2026 · metrics 2.10.0
npm
deathau/sliding-panes-obsidian
Andy Matuschak Mode as a plugin
No licenseJul 26, 2026 · metrics 2.10.0
Packagist
qruto/laravel-wave
Painless Laravel Broadcasting with SSE
MITAug 5, 2026 · metrics 2.10.0
PyPI
scikit-fuzzy/scikit-fuzzy
Fuzzy Logic SciKit (Toolkit for SciPy)
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist
bjeavons/zxcvbn-php
Realistic PHP password strength estimate library based on Zxcvbn JS
MITAug 13, 2026 · metrics 2.10.0
PyPI
scour-project/scour
Scour - An SVG Optimizer / Cleaner
Apache-2.0Jul 30, 2026 · metrics 2.10.0
PyPI
berkerpeksag/astor
Python AST read/write
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
—
StevenBaby/onix
Onix - 操作系统实现
MITJul 31, 2026 · metrics 2.10.0
PyPI
dabeaz/sly
Sly Lex Yacc
Custom licenseJul 21, 2026 · metrics 2.10.0
Go
42atomys/stud42
Stud42 official repository since major 3 update (https://s42.app)
MITJul 19, 2026 · metrics 2.10.0
PyPI
beeware/voc
A transpiler that converts Python code into Java bytecode
BSD-3-ClauseJul 21, 2026 · metrics 2.10.0
—
douban/beansdb
Archived, see GoBeansDB instead.
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
rtomayko/shotgun
reloading rack development server / forking version of rackup
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
wolever/parameterized
Parameterized testing with any Python test framework
Custom licenseAug 27, 2026 · metrics 2.10.0
RubyGems
toretore/barby
The Ruby barcode generator
MITJul 21, 2026 · metrics 2.10.0
—
jthuraisamy/TelemetrySourcerer
Enumerate and disable common sources of telemetry used by AV/EDR.
Apache-2.0Aug 4, 2026 · metrics 2.10.0