Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,052
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
qBraid/community
Where qBraid users discuss, report bugs and submit feature requests.
MITOct 2, 2026 · metrics 2.10.0
Go · PyPI
replicate/cog-runtime
Cog runtime implementation
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
returnearly/laravel-enums
A package to generate PHP 8.1 Enums, and adds Laravel Collection helpers around them.
MITSep 16, 2026 · metrics 2.10.0
PyPI
ripl-org/sirad
SIRAD: Secure Infrastructure for Research with Administrative Data
Custom licenseOct 23, 2026 · metrics 2.10.0
crates.io · npm
risingwavelabs/rw-diagnose-tools
Toolset for diagnosing Risingwave clusters.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
rrweb-io/CSSOM
CSS Object Model implemented in pure JavaScript. Also, a CSS parser.
MITSep 15, 2026 · metrics 2.10.0
Go
sean2077/oh-my-agents
Lightweight dual-agent CLI + skills toolkit for Claude Code and Codex workflows.
MITOct 19, 2026 · metrics 2.10.0
PyPI
seip25/Lila
Lila is a minimalist Python framework based on Starlette and Pydantic. Designed for developers seeking simplicity, flexibility, and robustness, it enables efficient and customizable web or API application development. Its modular structure and support for advanced configurations make it suitable for both beginners and experienced developers.
MITOct 20, 2026 · metrics 2.10.0
npm
shipshapecode/ember-3d-folding-panel
An Ember addon for 3d folding panels
MITSep 9, 2026 · metrics 2.10.0
RubyGems
smartcontractkit/old-chainlink-ruby-docs
Beautiful static documentation for your API
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
socketio/emitter
Event emitter component
MITSep 15, 2026 · metrics 2.10.0
Go · npm
src-d/landing
landing for source{d}
MITSep 14, 2026 · metrics 2.10.0
—
tkf/ExternalDocstrings.jl
No repository description published.
MITSep 10, 2026 · metrics 2.10.0
Packagist
tomatophp/console-helpers
tons of helper you need for you artisan command line application
MITSep 16, 2026 · metrics 2.10.0
Packagist
tomatophp/filament-translation-component
Translation Component as a key/value to use it with Spatie Translatable FilamentPHP Plugin
MITSep 13, 2026 · metrics 2.10.0
npm
tyler-technologies-oss/forge-angular
An adapter library for using Forge components in an Angular application.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
unification-com/mainchain
Official Unification Mainchain implementation
Custom licenseOct 18, 2026 · metrics 2.10.0
Packagist
upstash/vector-php
Upstash Vector Database PHP Client, Upsert, Query and Range vectors
MITSep 10, 2026 · metrics 2.10.0
Go
utox39/oh-my-update
oh-my-zsh plugin/theme updater
MITSep 12, 2026 · metrics 2.10.0
Go
wailsapp/mimetype
A fast Golang library for media type and file extension detection, based on magic numbers
MITOct 20, 2026 · metrics 2.10.0
—
weaveworks/policy-library
The policy-as-code library
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
webdriverio-boneyard/wdio-dot-reporter
A WebdriverIO v4 plugin. Report results in dot format.
MITOct 18, 2026 · metrics 2.10.0
npm
weirdpattern/eslint-config-typescript
An opinionated set of ESLint rules for TypeScript projects
MITOct 18, 2026 · metrics 2.10.0
Go
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
MITSep 13, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-decimal
Check if a character is decimal
MITSep 16, 2026 · metrics 2.10.0
—
xapi-project/stdext
Xenserver's (deprecated) extensions to the ocaml standard library
Custom licenseSep 13, 2026 · metrics 2.10.0
—
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
MITSep 20, 2026 · metrics 2.10.0
npm
zertosh/eslint-plugin-no-async-without-await
Enforce that async functions use await
No licenseOct 18, 2026 · metrics 2.10.0