Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,101
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
kach/nearley
📜🔜🌲 Simple, fast, powerful parser toolkit for JavaScript.
MITSep 17, 2026 · metrics 2.10.0
PyPI
GeneralMills/pytrends
Pseudo API for Google Trends
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
mathiasbynens/he
A robust HTML entity encoder/decoder written in JavaScript.
MITSep 16, 2026 · metrics 2.10.0
npm
tildeio/rsvp.js
A lightweight library that provides tools for organizing asynchronous code
MITSep 17, 2026 · metrics 2.10.0
PyPI
pytorch/text
Models, data loaders and abstractions for language processing, powered by PyTorch
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
life4/textdistance
📐 Compute distance between sequences. 30+ algorithms, pure python implementation, common interface, optional external libs usage.
MITSep 17, 2026 · metrics 2.10.0
PyPI
scanny/python-pptx
Create Open XML PowerPoint documents in Python
MITSep 16, 2026 · metrics 2.10.0
Packagist
michelf/php-markdown
Parser for Markdown and Markdown Extra derived from the original Markdown.pl by John Gruber.
Custom licenseSep 18, 2026 · metrics 2.10.0
NuGet
mayuki/Cocona
Micro-framework for .NET console application. Cocona makes it easy and fast to build console applications on .NET.
MITSep 16, 2026 · metrics 2.10.0
npm
ulid/javascript
Universally Unique Lexicographically Sortable Identifier
MITSep 17, 2026 · metrics 2.10.0
npm
revolist/revogrid
Powerful virtual data table smartsheet with advanced customization. Best features from excel plus incredible performance 🔋
MITSep 19, 2026 · metrics 2.10.0
—
matro7sh/BypassAV
This map lists the essential techniques to bypass anti-virus and EDR
No licenseSep 16, 2026 · metrics 2.10.0
npm
stevenpetryk/mafs
React components for interactive math
MITSep 20, 2026 · metrics 2.10.0
npm
devongovett/regexgen
Generate regular expressions that match a set of strings
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
decalage2/oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
gobuffalo/packr
The simple and easy way to embed static files into Go binaries.
MITSep 19, 2026 · metrics 2.10.0
PyPI
databricks/koalas
Koalas: pandas API on Apache Spark
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
esamattis/underscore.string
String manipulation helpers for javascript
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
resemble-ai/Resemblyzer
A python package to analyze and compare voices with deep learning
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
erdewit/ib_insync
Python sync/async framework for Interactive Brokers API
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
Go
go-gota/gota
Gota: DataFrames and data wrangling in Go (Golang)
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
bestiejs/platform.js
A platform detection library.
MITSep 17, 2026 · metrics 2.10.0
PyPI
protectai/llm-guard
The Security Toolkit for LLM Interactions
MITSep 17, 2026 · metrics 2.10.0
npm
craigary/nobelium
A static blog build on top of Notion and NextJS, deployed on Vercel.
MITSep 19, 2026 · metrics 2.10.0
PyPI
pallets/itsdangerous
Safely pass trusted data to untrusted environments and back.
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
vueuse/vue-demi
🎩 Creates Universal Library for Vue 2 & 3
MITSep 17, 2026 · metrics 2.10.0
PyPI
ColinDuquesnoy/QDarkStyleSheet
A dark style sheet for QtWidgets application
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
bcoin-org/bcoin
Javascript bitcoin library for node.js and browsers
Custom licenseSep 18, 2026 · metrics 2.10.0
—
bincode-org/bincode
A binary encoder / decoder implementation in Rust.
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
achillean/shodan-python
The official Python library for Shodan
Custom licenseSep 17, 2026 · metrics 2.10.0