Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
572B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
aymerick/douceur
A simple CSS parser and inliner in Go
MITJul 30, 2026 · metrics 2.10.0
Maven
os72/protoc-jar-maven-plugin
Protocol Buffers protobuf maven plugin - based on protoc-jar multi-platform executable protoc JAR
Apache-2.0Aug 21, 2026 · metrics 2.10.0
crates.io
tokio-rs/tls
A collection of Tokio based TLS libraries.
MITAug 11, 2026 · metrics 2.10.0
PyPI
AzureAD/azure-activedirectory-library-for-python
ADAL for Python
Custom licenseJul 21, 2026 · metrics 2.10.0
npm
kornelski/http-cache-semantics
RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
Maven
javaee/servlet-spec
The API and Issue Tracker for the JCP Standard Java Servlet Specification
Custom licenseJul 28, 2026 · metrics 2.10.0
RubyGems
railsware/rack_session_access
Rack middleware that provides access to rack.session environment
MITAug 21, 2026 · metrics 2.10.0
npm
ajv-validator/ajv-keywords
Additional JSON-Schema keywords for Ajv JSON validator
MITJul 22, 2026 · metrics 2.10.0
PyPI
matthewgilbert/pdblp
pandas wrapper for Bloomberg Open API
MITSep 8, 2026 · metrics 2.10.0
PyPI
schodet/nxt-python
NXT-Python is a python driver/interface for the Lego Mindstorms NXT robot based on NXT_python.
GPL-3.0Aug 16, 2026 · metrics 2.10.0
Packagist
webmozarts/glob
A PHP implementation of Ant's glob.
MITJul 22, 2026 · metrics 2.10.0
npm
dcos/dcos-ui
The UI for The Datacenter Operating System
Apache-2.0Aug 16, 2026 · metrics 2.10.0
PyPI
evfro/polara
Recommender system and evaluation framework for top-n recommendations tasks that respects polarity of feedbacks. Fast, flexible and easy to use. Written in python, boosted by scientific python stack.
MITJul 31, 2026 · metrics 2.10.0
—
moq/moq.spikes
The most popular and friendly mocking framework for .NET
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
browserify/node-util
node.js util module as a module
MITAug 31, 2026 · metrics 2.10.0
Packagist · npm
felixfbecker/php-advanced-json-rpc
A more advanced PHP implementation of the JSONRPC Protocol 📞❗
ISCJul 22, 2026 · metrics 2.10.0
PyPI
pytest-dev/pytest-subtests
unittest subTest() support and subtests fixture
MITAug 27, 2026 · metrics 2.10.0
Maven
spinnaker/orca
Orchestration engine
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Maven
ACINQ/eclair-mobile
An Android wallet for the Lightning Network
Apache-2.0Jul 22, 2026 · metrics 2.10.0
RubyGems
guard/rb-fsevent
FSEvents API with signals handled (without RubyCocoa)
MITJul 22, 2026 · metrics 2.10.0
crates.io
Marwes/schemafy
Crate for generating rust types from a json schema
MITAug 25, 2026 · metrics 2.10.0
crates.io
tokio-rs/valuable
No repository description published.
MITAug 3, 2026 · metrics 2.10.0
Maven
xolstice/protobuf-maven-plugin
Maven Plugin that executes the Protocol Buffers (protoc) compiler
Custom licenseJul 30, 2026 · metrics 2.10.0
NuGet
ferram4/Ferram-Aerospace-Research
Aerodynamics model for Kerbal Space Program
Custom licenseAug 1, 2026 · metrics 2.10.0
RubyGems
ConnorAtherton/rb-readline
Pure-Ruby Readline Implementation
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
Packagist · npm
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
No licenseJul 24, 2026 · metrics 2.10.0
npm
ganesshkumar/obsidian-table-editor
An Obsidian plugin to provide an editor for Markdown tables. It can open CSV data and data from Microsoft Excel, Google Sheets, Apple Numbers and LibreOffice Calc as Markdown tables from Obsidian Markdown editor.
MITAug 28, 2026 · metrics 2.10.0
npm
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
MITAug 4, 2026 · metrics 2.10.0
Maven
philburk/jsyn
Modular audio synthesizer library with unit generators in Java
Apache-2.0Jul 23, 2026 · metrics 2.10.0
npm
sindresorhus/load-json-file
Read and parse a JSON file
MITAug 4, 2026 · metrics 2.10.0