Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,845
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
MadcowD/gmail.js
Gmail JavaScript API
MITSep 15, 2026 · metrics 2.10.0
crates.io · npm
Maskviva/levilamina-rust-loader
Teach LeviLamina to load Minecraft Bedrock Dedicated Server mods written in Rust.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
MetaMask/ethjs-util
A simple set of Ethereum JS utilities such toBuffer and isHexPrefixed.
MITSep 28, 2026 · metrics 2.10.0
npm
MetaMask/swaps-controller
DEPRECATED: use BridgeController and BridgeStatusController from https://github.com/MetaMask/core/ instead
Custom licenseSep 28, 2026 · metrics 2.10.0
—
MightyPork/sdscp
Preprocessor for SDS-C (function arguments, return values, better macros, #include)
GPL-2.0Oct 20, 2026 · metrics 2.10.0
Go · npm
Miraddo/gosoline
Gosoline is our framework which fuels all of our Golang applications
MITOct 21, 2026 · metrics 2.10.0
PyPI
MonetDB/monetdb-tlstester
No repository description published.
No licenseOct 23, 2026 · metrics 2.10.0
crates.io
Moonsong-Labs/compilers
Utilities for working with native solc and compiling projects.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
Moulberry/adventure
A user-interface library, formerly known as text, for Minecraft: Java Edition
MITAug 28, 2026 · metrics 2.10.0
Go
Nanyan/heco-chain
HECO-Chain client based on the go-ethereum fork
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
NethermindEth/docker-volumes-snapshotter
No repository description published.
Apache-2.0Sep 28, 2026 · metrics 2.10.0
crates.io · npm
Nutomic/lemmy
🐀 Building a federated alternative to reddit in rust
AGPL-3.0Sep 15, 2026 · metrics 2.10.0
—
OKNoah/wormhole
Secure tunnel
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
ONSdigital/dp-s3
Client to interact with AWS S3
MITOct 18, 2026 · metrics 2.10.0
Go
Ph0m1/Porta
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
—
Prendo93/m3u8-1
Parser and generator of M3U8-playlists for Apple HLS. Library for Go language. :cinema:
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
ProtocolONE/chihaya
A customizable, multi-protocol BitTorrent Tracker
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
Qintsg/dsh-safe-delete
Safe delete plugin for DeepSeek Harness (DSH): move files to trash / staging area instead of permanent removal, with restore and purge support.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
Quansight-Labs/pyyaml-ft
Fork of PyYAML with support for free-threading
MITSep 10, 2026 · metrics 2.10.0
npm
RebeccaStevens/ts-declaration-location
Determine where a ts type declaration comes from
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
crates.io
RedisGears/v8-rs
rust wrapper for v8
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
Robot-Inventor/eslint-config
My ESLint config preset
MITSep 16, 2026 · metrics 2.10.0
Go
Ruteri/gocontext
No repository description published.
No licenseSep 25, 2026 · metrics 2.10.0
Go
SWAN-community/swift-go
Shared Web InFormaTion (SWIFT) - an open source cryptographically secure web solution for sharing information across domains implemented in Go
Apache-2.0Sep 18, 2026 · metrics 2.10.0
NuGet
Servarr/FFMpegCore
A .NET FFMpeg/FFProbe wrapper for easily integrating media analysis and conversion into your C# applications
MITSep 13, 2026 · metrics 2.10.0
Go
ShannonDing/rocketmq-client-go
Apache RocketMQ go client
Apache-2.0Sep 13, 2026 · metrics 2.10.0
RubyGems
Shopify/spring
Rails application preloader
MITOct 19, 2026 · metrics 2.10.0
Go
SigNoz/prometheus
The Prometheus monitoring system and time series database.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
SimonGino/i18n-manager
A powerful multilingual properties file management tool designed for Java project internationalization (i18n). This tool helps you easily manage and synchronize translations in message-application.properties files.
No licenseSep 14, 2026 · metrics 2.10.0
crates.io
Snowfork/milagro_bls
BLS12-381 cryptography using Apache Milagro
Apache-2.0Sep 11, 2026 · metrics 2.10.0