Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,784
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
NuGet · npm
serenity-is/common-features
Contains demo modules and common features shared between Serene and StartSharp
No licenseJul 25, 2026 · metrics 2.10.0
crates.io
servo/core-text-rs
DEPRECATED - Rust bindings for CoreText.
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
spdy-http2/handle-thing
The Thing when you need it
No licenseAug 31, 2026 · metrics 2.10.0
Packagist
superfaktura/apiclient
SuperFaktúra oficiálny PHP-API klient.
MITJul 28, 2026 · metrics 2.10.0
crates.io
swgillespie/unicode-categories
A simple crate that allows for unicode categories can be queried for characters.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Packagist
theofidry/console
Library for creating CLI commands or applications
MITSep 5, 2026 · metrics 2.10.0
Maven
valtimo-platform/valtimo-backend-libraries
Welcome at the Valtimo repository. Valtimo is the less-code platform for Business Process Automation. Built on top of business process orchestrator Camunda. Valtimo's goal is to make implementing business process automation and case management easy. Valtimo is the server side component for business process automation.
Custom licenseJul 16, 2026 · metrics 2.10.0
NuGet
AleXr64/Telegram-bot-framework
Framework to simplify writing telegram bots
MITAug 2, 2026 · metrics 2.10.0
NuGet
CoreCompat/libgdiplus-packaging
NuGet packages which include native builds of libgdiplus for macOS.
MITJul 18, 2026 · metrics 2.10.0
—
SpiNNakerManchester/spinnaker_tools
SpiNNaker API, sark, sc&mp, bmp firmware and build tools
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Packagist
Sylius/SyliusInventoryBundle
[READ-ONLY] Flexible inventory management for Symfony2 e-commerce applications.
MITSep 3, 2026 · metrics 2.10.0
PyPI
afonasev/flake8-plugin-utils
The package provides base classes and utils for flake8 plugin writing
MITJul 28, 2026 · metrics 2.10.0
npm
artilleryio/artillery-plugin-publish-metrics
Moved to https://github.com/artilleryio/artillery/tree/main/packages/artillery-plugin-publish-metrics
No licenseJul 16, 2026 · metrics 2.10.0
Go · npm
brigadecore/brigade-github-app
A Brigade v1.x compatible gateway for forwarding events from GitHub to Brigade
Apache-2.0Aug 19, 2026 · metrics 2.10.0
—
cappyzawa/starlark.vim
vim plugin for starlark
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
craftcms/ecs
Easy Coding Standard configurations for Craft CMS projects.
MITJul 30, 2026 · metrics 2.10.0
crates.io
crossterm-rs/crossterm-winapi
Crossterm Windows API Abstractions
MITAug 11, 2026 · metrics 2.10.0
npm
gamunu/vscode-opentofu
Visual Studio Code Extension without Terraform Cloud and Telemetry
MPL-2.0Jul 31, 2026 · metrics 2.10.0
npm
iarna/has-unicode
Try to guess if your terminal supports unicode
ISCAug 31, 2026 · metrics 2.10.0
—
jawabuu/kloud-3s
Bootstrap a simple, secure kubernetes deployment on public cloud providers using terraform and k3s.
MITAug 3, 2026 · metrics 2.10.0
npm
microsoft/use-disposable
Creating instances in React during render that need to be disposed even with StrictMode
MITSep 4, 2026 · metrics 2.10.0
—
oakserver/media_types
Deprecated. Use std/media_types instead.
MITJul 19, 2026 · metrics 2.10.0
—
oxen-io/libsession-util
Session utilities library
GPL-3.0Aug 23, 2026 · metrics 2.10.0
Packagist
pburggraf/CRC
Cyclic redundancy checker class
MITJul 28, 2026 · metrics 2.10.0
PyPI
readthedocs/readthedocs-sphinx-ext
[RTD Internal] This is an extension that we install on all Sphinx builds on Read the Docs
MITJul 21, 2026 · metrics 2.10.0
PyPI
savoirfairelinux/flake8-copyright
Adds copyright checks to flake8
LGPL-3.0Aug 8, 2026 · metrics 2.10.0
npm
spdy-http2/http-deceiver
Deceive HTTP Parser
No licenseAug 31, 2026 · metrics 2.10.0
—
twitter-archive/git
Git Source Code Mirror - This is a publish-only repository and all pull requests are ignored. Please follow Documentation/SubmittingPatches procedure for any of your improvements.
Custom licenseAug 23, 2026 · metrics 2.10.0
PyPI
ukBaz/python-btsocket
Python library to interact with the Bluez Bluetooth Management API communicating with the kernel using a so-called Bluetooth Management sockets
MITAug 22, 2026 · metrics 2.10.0
NuGet
Angel-125/WildBlueTools
Parts and PartModules for KSP
No licenseJul 31, 2026 · metrics 2.10.0