Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,299
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
twilio/authy-ruby
**Deprecated** Ruby library to access the authy API
MITSep 11, 2026 · metrics 2.10.0
npm
LiskArchive/lisk-nano
🖥 Minimal Lisk graphical user interface for desktop
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Packagist
Spomky-Labs/base64url
Base64 URL Safe Encoding/Decoding PHP library
MITSep 18, 2026 · metrics 2.10.0
Go
autobrr/omegabrr
Omegabrr transforms monitored shows, movies, books and music from arrs into autobrr filters. It also supports adding titles from custom lists to autobrr filters.
MITSep 14, 2026 · metrics 2.10.0
PyPI
gazpachoking/jsonref
Automatically dereferences JSON references within a JSON document.
MITOct 21, 2026 · metrics 2.10.0
—
tableau/hyper-api-samples
Sample code to get started with the Hyper API.
MITSep 14, 2026 · metrics 2.10.0
Packagist
charlieuki/receipt-printer
Laravel package to integrate ECS/POS Print Driver for PHP
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
plotly/dash-html-components
OBSOLETE - now part of https://github.com/plotly/dash
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
sindresorhus/merge-descriptors
Merge objects using their property descriptors
MITSep 16, 2026 · metrics 2.10.0
Packagist
gasparesganga/php-shapefile
PHP library to read and write ESRI Shapefiles, compatible with WKT and GeoJSON
MITOct 23, 2026 · metrics 2.10.0
Hex
devonestes/assertions
Helpful assertions for ExUnit
MITOct 25, 2026 · metrics 2.10.0
RubyGems
mattbrictson/chandler
[unmaintained] chandler syncs your CHANGELOG entries to GitHub's release notes
MITSep 11, 2026 · metrics 2.10.0
Go
pavel-one/EdgeGPT-Go
EdgeGPT-Go: Reverse engineered API of Microsoft's Bing Chat AI for Golang with GRPC, CLI, Library interface and cookie manager
MITSep 19, 2026 · metrics 2.10.0
PyPI
pipermerriam/flex
Swagger schema validator
MITSep 12, 2026 · metrics 2.10.0
RubyGems
rrrene/sparkr
▁▂▃▅▂▇ in Ruby (and your shell)
MITSep 11, 2026 · metrics 2.10.0
Go · npm · PyPI
Dan6erbond/share-me
An image and video hosting platform for your server, with rich embed support and API.
MITOct 20, 2026 · metrics 2.10.0
PyPI
d5h-foss/grpc-interceptor
Simplified Python gRPC interceptors
MITOct 23, 2026 · metrics 2.10.0
npm
egoist/joycon
Find and load config files with joy.
MITSep 15, 2026 · metrics 2.10.0
PyPI
elemental-lf/benji
Benji Backup: A block based deduplicating backup software for Ceph RBD images, iSCSI targets, image files and block devices
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
fitzgen/glob-to-regexp
Convert a glob to a regular expression
No licenseSep 16, 2026 · metrics 2.10.0
Go
ovh/go-ovh
Simple go wrapper for the OVH API
BSD-3-ClauseOct 25, 2026 · metrics 2.10.0
Packagist · npm
spiritix/php-chrome-html2pdf
A PHP library for converting HTML to PDF using Google Chrome
MITSep 14, 2026 · metrics 2.10.0
Go
srwiley/rasterx
Rasterx is an SVG 2.0 path compliant rasterizer that can use either scany, the golang vector or a derivative of the freetype anti-aliaser.
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
PyPI
JinyuanSun/PymolFold
Protein folding in Pymol
MITSep 10, 2026 · metrics 2.10.0
PyPI
google/python_portpicker
A module to find available network ports for testing.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs-click
An MkDocs extension to generate documentation for Click command line applications
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
mother/react-files
A file input (dropzone) management component for React
MITOct 18, 2026 · metrics 2.10.0
NuGet
serilog-contrib/Serilog.Enrichers.Sensitive
A Serilog LogEvent enricher that masks sensitive data
MITSep 11, 2026 · metrics 2.10.0
RubyGems
svoop/autotest-growl
Next generation Growl support for autotest.
MITSep 12, 2026 · metrics 2.10.0
crates.io
thomcc/arcstr
Better reference counted strings for Rust
Apache-2.0Sep 25, 2026 · metrics 2.10.0