Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,226
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
d3/d3-path
Serialize Canvas path commands to SVG.
ISCOct 21, 2026 · metrics 2.10.0
—
dotnet/sdk-container-builds
Libraries and build tooling to create container images from .NET projects using MSBuild
MITSep 15, 2026 · metrics 2.10.0
RubyGems
kucaahbe/rspec-html-matchers
Old school have_tag, with_tag(and more) matchers for rspec 3 (Nokogiri powered)
MITSep 11, 2026 · metrics 2.10.0
PyPI · npm
samuelcolvin/smokeshow
create temporary websites
MITSep 12, 2026 · metrics 2.10.0
crates.io
wasmCloud/wascc-host
Library for hosting actors and capability providers in a host process
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm · PyPI
METR/task-standard
METR Task Standard
MITSep 14, 2026 · metrics 2.10.0
—
TwP/servolux
Threads : Servers : Forks : Daemons
No licenseSep 12, 2026 · metrics 2.10.0
Maven · npm
bmwcarit/joynr
A transport protocol agnostic (MQTT, HTTP, WebSockets etc.) Franca IDL based communication framework supporting multiple communication paradigms (RPC, Pub-Sub, broadcast etc.)
Apache-2.0Oct 19, 2026 · metrics 2.10.0
RubyGems
nebulab/erb-formatter
Format ERB files with speed and precision
MITSep 12, 2026 · metrics 2.10.0
PyPI
pytest-dev/pytest-repeat
pytest plugin for repeating test execution
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
tapjs/stack-utils
Captures and cleans stack traces.
MITSep 16, 2026 · metrics 2.10.0
Go
vmware-tanzu/tanzu-framework
Tanzu Framework provides a set of building blocks to build atop of the Tanzu platform and leverages Carvel packaging and plugins to provide users with a much stronger, more integrated experience than the loose coupling and stand-alone commands of the previous generation of tools.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
basepom/duplicate-finder-maven-plugin
Maven plugin to find duplicate classes or resources
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
linxGnu/gosmpp
Smpp (3.4) Client Library for Go
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
litixsoft/karma-mocha-reporter
Karma reporter plugin with mocha style logging.
Custom licenseOct 18, 2026 · metrics 2.10.0
crates.io
smol-rs/async-broadcast
Async broadcast channels
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
Pythe1337N/garmin-connect
Makes it simple to interface with Garmin Connect to get or set any data point.
MITOct 20, 2026 · metrics 2.10.0
PyPI
byrnereese/mkdocs-minify-plugin
A mkdocs plugin to minify the HTML of a page before it is written to disk.
MITOct 23, 2026 · metrics 2.10.0
npm
davisjam/safe-regex
Detect possibly catastrophic, exponential-time regular expressions
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
jackc/pgconn
No repository description published.
MITSep 23, 2026 · metrics 2.10.0
RubyGems
piotrmurach/tty-box
Draw various frames and boxes in your terminal window
MITSep 11, 2026 · metrics 2.10.0
npm
FredKSchott/rollup-plugin-polyfill-node
A modern Node.js polyfill for your Rollup bundle.
Custom licenseSep 15, 2026 · metrics 2.10.0
—
PX4/PX4-Matrix
Lightweight, dependency free Matrix library (BSD)
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
Go
google/shlex
Automatically exported from code.google.com/p/go-shlex
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
kitar/laravel-dynamodb
A DynamoDB based Eloquent model and Query builder for Laravel.
MITOct 8, 2026 · metrics 2.10.0
—
TheDoctor0/zip-release
GitHub action that can be used to create release zip archive.
MITSep 15, 2026 · metrics 2.10.0
PyPI
VaasuDevanS/cowsay-python
The famous cowsay 🐮 for GNU/Linux is now available for python
GPL-3.0Sep 12, 2026 · metrics 2.10.0
npm
browserify/path-browserify
The path module from Node.js for browsers
MITSep 16, 2026 · metrics 2.10.0
RubyGems
fluent/sigdump
Use signal to show stacktrace of a Ruby process without restarting it
Apache-2.0Sep 11, 2026 · metrics 2.10.0
RubyGems
ruby-concurrency/thread_safe
Thread-safe collections for Ruby (merged with concurrent-ruby)
Apache-2.0Sep 12, 2026 · metrics 2.10.0