Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,105
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
jensyt/imurmurhash-js
An incremental implementation of MurmurHash3 for JavaScript
MITSep 16, 2026 · metrics 2.10.0
npm
jshttp/compressible
Compressible Content-Type / mime checking.
MITSep 16, 2026 · metrics 2.10.0
PyPI
ronaldoussoren/macholib
macholib can be used to analyze and edit Mach-O headers, the executable format used by Mac OS X. It's typically used as a dependency analysis tool, and also to rewrite dylib references in Mach-O headers to be @executable_path relative. Though this tool targets a platform specific file format, it is pure python code that is platform and endian independent.
MITSep 10, 2026 · metrics 2.10.0
crates.io
servo/heapsize
In support of measuring heap allocations in Rust programs.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
RedKenrok/node-audiorecorder
Audio recorder for Node.js, delivers a 16-bit signed-integer linear pulse modulation WAV stream.
MITSep 16, 2026 · metrics 2.10.0
NuGet
TChatzigiannakis/InputSimulatorPlus
Windows Input Simulator Plus
MS-PLSep 11, 2026 · metrics 2.10.0
PyPI
XanaduAI/MrMustard
A differentiable bridge between phase space and Fock space
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
bcoin-org/bcrypto
JS crypto library
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
browserify/randombytes
random bytes from browserify stand alone
MITSep 16, 2026 · metrics 2.10.0
Packagist
chriskonnertz/string-calc
PHP calculator library for mathematical terms (expressions) passed as strings
MITOct 18, 2026 · metrics 2.10.0
Hex
elixir-nx/tokenizers
Elixir bindings for 🤗 Tokenizers
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go
hashicorp/terraform-provider-postgresql
As part of our introduction to self-service publishing in the Terraform Registry, this copy of the provider has been archived, and ownership has been transferred to active maintainers in the community. Please see the new location on the Terraform Registry: https://registry.terraform.io/providers/cyrilgdn/postgresql
MPL-2.0Oct 19, 2026 · metrics 2.10.0
npm
holtwick/bx-mac
Sandbox any macOS app — only your project directory stays accessible
MITSep 10, 2026 · metrics 2.10.0
npm
koopjs/FeatureServer
An open source Geoservices Implementation (deprecated)
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
lndk-org/lndk
No repository description published.
MITOct 20, 2026 · metrics 2.10.0
PyPI
mayn/packerlicious
use python to make hashicorp packer templates
Apache-2.0Oct 12, 2026 · metrics 2.10.0
PyPI
phausamann/sklearn-xarray
Metadata-aware machine learning.
BSD-3-ClauseSep 22, 2026 · metrics 2.10.0
PyPI
sighingnow/libclang
(Unofficial) Release libclang (clang.cindex) on pypi.
Custom licenseSep 10, 2026 · metrics 2.10.0
Packagist · npm
silverstripe/silverstripe-blog
Blog module for Silverstripe CMS
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
npm
wessberg/ts-evaluator
An interpreter for Typescript that can evaluate an arbitrary Node within a Typescript AST
MITSep 9, 2026 · metrics 2.10.0
PyPI
wraith-wireless/PyRIC
Python wireless library for Linux
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
chrisrude/oobabot
A Discord bot which talks to Large Language Model AIs running on oobabooga's text-generation-webui
MITOct 19, 2026 · metrics 2.10.0
PyPI
click-contrib/click-didyoumean
Enable git-like did-you-mean feature in click :sparkles:
MITOct 23, 2026 · metrics 2.10.0
Maven
conductor-framework/conductor
[NO LONGER MAINTAINED] The Selenium framework that takes you where you want to go
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
dotgreg/tiro-notes
An open-source, cross-platform markdown editor designed for extensibility & flexibility
GPL-3.0Sep 14, 2026 · metrics 2.10.0
Go
hashicorp/consul-api-gateway
The Consul API Gateway is a dedicated ingress solution for intelligently routing traffic to applications running on a Consul Service Mesh.
MPL-2.0Oct 22, 2026 · metrics 2.10.0
npm
haydenbleasel/batchwork
Unified batch API for AI providers. Save up to 50% on LLM costs.
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
inrupt-archived/solid-ui-react
React SDK using @inrupt/solid-client
MITOct 19, 2026 · metrics 2.10.0
PyPI
ninemoreminutes/django-crum
Django CRUM (Current Request User Middleware) captures the current request and user in thread local storage.
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
radude/mdx_truly_sane_lists
Extension for Python-Markdown that makes lists truly sane. Custom indents for nested lists and fix for messy linebreaks and paragraphs between lists.
MITSep 12, 2026 · metrics 2.10.0