Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,826
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
suchow/Dissertate
Beautiful LaTeX dissertation templates.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
aws-samples/aws-secure-environment-accelerator
ASEA developer support has ended, and the ASEA github repo will be marked Archived (read-only) by the end of 2025.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
common-nighthawk/go-figure
Prints ASCII art from text.
MITSep 23, 2026 · metrics 2.10.0
PyPI
erdewit/nest_asyncio
Patch asyncio to allow nested event loops
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
PyPI
django-ordered-model/django-ordered-model
Get your Django models in order
Custom licenseSep 17, 2026 · metrics 2.10.0
—
jplattel/obsidian-clipper
A Chrome extension that easily clips selections to Obsidian
No licenseSep 13, 2026 · metrics 2.10.0
PyPI
opentracing/opentracing-python
OpenTracing API for Python. 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
selectel/pyte
Simple VTXXX-compatible linux terminal emulator
LGPL-3.0Sep 15, 2026 · metrics 2.10.0
RubyGems
Shopify/erb_lint
Lint your ERB or HTML files
MITSep 11, 2026 · metrics 2.10.0
—
RapidScada/scada
Contains Rapid SCADA sources
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Hex
parroty/exvcr
HTTP request/response recording library for elixir, inspired by VCR.
MITSep 9, 2026 · metrics 2.10.0
npm
expo/vector-icons
No repository description published.
MITOct 22, 2026 · metrics 2.10.0
npm
pngjs/pngjs
Simple PNG encoder/decoder
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
zertosh/v8-compile-cache
Require hook for automatic V8 compile cache persistence
MITSep 15, 2026 · metrics 2.10.0
npm
calvinmetcalf/lie
A basic but performant promise implementation.
MITSep 15, 2026 · metrics 2.10.0
—
gosuri/uitable
A go library to improve readability in terminal apps using tabular data
MITOct 21, 2026 · metrics 2.10.0
crates.io
dirs-dev/dirs-rs
moved to https://codeberg.org/dirs/dirs-rs
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
src-d/proteus
Generate .proto files from Go source code.
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
fluxninja/aperture
Rate limiting, caching, and request prioritization for modern workloads
Apache-2.0Sep 20, 2026 · metrics 2.10.0
RubyGems
peterc/whatlanguage
Pure Ruby natural language detection library for 160+ languages.
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
adilmohak/django-lms
A learning management system using django web framework. Course add and drop, grade and assessment result management, online quiz, report generator, student and lecturers management, dashboard, and so much more...
MITSep 19, 2026 · metrics 2.10.0
Go
gorilla/securecookie
Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Go
shurcooL/graphql
Package graphql provides a GraphQL client implementation.
MITSep 23, 2026 · metrics 2.10.0
Go
jonboulle/clockwork
a fake clock for golang
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist
mustangostang/spyc
A simple YAML loader/dumper class for PHP
MITOct 20, 2026 · metrics 2.10.0
RubyGems
hotwired/stimulus-rails
Use Stimulus in your Ruby on Rails app
MITSep 11, 2026 · metrics 2.10.0
Go
rivo/uniseg
Unicode Text Segmentation, Word Wrapping, and String Width Calculation in Go
MITSep 14, 2026 · metrics 2.10.0
Go
vmware-archive/kubecfg
A tool for managing complex enterprise Kubernetes environments as code.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Packagist
dflydev/dflydev-dot-access-data
Given a deep data structure representing a configuration, access configuration by dot notation.
MITOct 24, 2026 · metrics 2.10.0
Go
chai2010/webp
WebP decoder and encoder for Go (Zero Dependencies). 该项目不再维护, 大家自己fork吧
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0