Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
carbon-design-system/carbon-for-ibm-dotcom
Carbon for IBM.com is based on the Carbon Design System for IBM
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
rbarrois/python-semanticversion
Semantic version comparison for Python (see http://semver.org/)
BSD-2-ClauseAug 27, 2026 · metrics 2.10.0
Maven · npm · RubyGems
wuba/taro-playground
The Taro Playground App is a cross-platform application developed using Taro, to help developers develop and debug Taro applications.
Apache-2.0Jul 23, 2026 · metrics 2.10.0
npm
FormidableLabs/groqd
Designed to give the best GROQ developer experience possible, with the flexibility of GROQ, schema-aware auto-completion, strong type-checking, and the runtime safety of Zod.
MITJul 27, 2026 · metrics 2.10.0
Maven
diffplug/durian
Guava's spikier (unofficial) cousin
Apache-2.0Aug 21, 2026 · metrics 2.10.0
—
jenkins-x/jenkins-x-platform
Helm umbrella repo containing the helm charts for the Jenkins-X platform on Kubernetes
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
ramonhagenaars/jsons
🐍 A Python lib for (de)serializing Python objects to/from JSON
MITAug 19, 2026 · metrics 2.10.0
npm
Oksydan/falcon
Prestashop starter theme that provides great development experience.
GPL-3.0Jul 25, 2026 · metrics 2.10.0
PyPI
algorand/pyteal
Algorand Smart Contracts in Python
MITAug 11, 2026 · metrics 2.10.0
crates.io
cbreeden/fxhash
A fast, non-secure, hashing algorithm derived from an internal hasher in FireFox.
No licenseAug 11, 2026 · metrics 2.10.0
NuGet
MizunagiKB/gd_cubism
Unofficial Live2D Player for Godot Engine
Custom licenseJul 23, 2026 · metrics 2.10.0
crates.io
Byron/jwalk
Filesystem walk performed in parallel with streamed and sorted results
MITAug 6, 2026 · metrics 2.10.0
—
flyerhq/flutter_firebase_chat_core
Actively maintained, community-driven Firebase BaaS for chat applications with an optional chat UI.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
langchain-ai/langchain-community
⚠️ No longer maintained, see linked issue
MITSep 9, 2026 · metrics 2.10.0
Go
omegion/ssh-manager
SSH Key Manager for 1Password, Bitwarden and AWS S3.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
servo/cocoa-rs
DEPRECATED - Cocoa/Objective-C bindings for the Rust programming language
Custom licenseJul 19, 2026 · metrics 2.10.0
PyPI
sffjunkie/astral
Python calculations for the position of the sun and moon.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
npm
ehmicky/human-signals
Human-friendly process signals
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
recharts/react-smooth
react animation
MITAug 4, 2026 · metrics 2.10.0
Go
pulumi/esc
Pulumi ESC is a centralized, secure service for environments, secrets, and configuration management, optimized for multi-cloud infrastructures and applications.
Apache-2.0Aug 6, 2026 · metrics 2.10.0
npm · PyPI
builder555/PineSAM
UI for Pinecil V2 - control it over BLE from your PC or your mobile.
MITJul 27, 2026 · metrics 2.10.0
npm
jonschlinkert/is-number
JavaScript/Node.js utility. Returns `true` if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.
MITAug 4, 2026 · metrics 2.10.0
PyPI
abersheeran/a2wsgi
Convert WSGI app to ASGI app or ASGI app to WSGI app.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
zertosh/loose-envify
Like envify but much faster
MITAug 4, 2026 · metrics 2.10.0
npm
then/is-promise
Test whether an object looks like a promises-a+ promise
MITAug 4, 2026 · metrics 2.10.0
NuGet
CatLib/Framework
deprecated, use : https://github.com/CatLib/CatLib
MITJul 27, 2026 · metrics 2.10.0
crates.io
SergioBenitez/yansi
A dead simple ANSI terminal color painting library for Rust.
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Go
mitchellh/colorstring
Go (golang) library for colorizing strings for terminal output.
MITAug 29, 2026 · metrics 2.10.0
Go
mitchellh/reflectwalk
reflectwalk is a Go library for "walking" complex structures, similar to walking a filesystem.
MITJul 28, 2026 · metrics 2.10.0
RubyGems
Azure/azure-sdk-for-ruby
Ruby SDK for Azure Resource Manager: build and manage your Azure cloud infrastructure (Compute, Virtual Networks, Storage, etc...) using Ruby.
MITJul 20, 2026 · metrics 2.10.0