Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,105
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
rehypejs/rehype-minify
plugins to minify HTML
MITSep 15, 2026 · metrics 2.10.0
npm
reyesoft/ngx-jsonapi
JSON API client library for Angular 5+ 👌 :: Production Ready 🚀
MITSep 18, 2026 · metrics 2.10.0
—
scwatts/fastspar
Rapid and scalable correlation estimation for compositional data
GPL-3.0Sep 11, 2026 · metrics 2.10.0
npm
sharetribe/ftw-daily
Deprecated! Sharetribe Flex Template for Web
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
spdy-http2/spdy-transport
SPDY v2, v3, v3.1 and HTTP2 transport implementation for node.js
No licenseOct 21, 2026 · metrics 2.10.0
—
Kyorai/riak_core
Distributed systems infrastructure used by Riak.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
RubyGems
SciRuby/statsample
A suite for basic and advanced statistics on Ruby.
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Packagist
TheDragonCode/pretty-routes
Pretty routes for Laravel Framework
MITOct 8, 2026 · metrics 2.10.0
npm
brianloveswords/buffer-crc32
A pure javascript CRC32 algorithm that plays nice with binary data
MITSep 16, 2026 · metrics 2.10.0
npm
browserify/browser-resolve
resolve function which support the browser field in package.json
MITSep 23, 2026 · metrics 2.10.0
npm
d3/d3-polygon
Geometric operations for two-dimensional polygons.
ISCSep 15, 2026 · metrics 2.10.0
PyPI
nod-ai/AMD-SHARK-ModelDev
Unified compiler/runtime for interfacing with PyTorch Dynamo.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
sphinx-extensions2/sphinx-autodoc2
A Sphinx extension that automatically generates API documentation for your Python packages.
MITSep 12, 2026 · metrics 2.10.0
Go
v2rayA/shadowsocksR
ShadowsocksR(SSR) library for Go. Deprecated. Use https://github.com/mzz2017/softwind/tree/main/transport/shadowsocksr instead.
MITSep 14, 2026 · metrics 2.10.0
RubyGems
DataDog/dogapi-rb
Ruby client for Datadog's API
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
RubyGems
apjanke/ronn-ng
Ronn-NG: An updated fork of ronn. Build man pages from Markdown.
MITSep 11, 2026 · metrics 2.10.0
npm
duplojs/zod-accelerator
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
—
fredrikwidlund/libdynamic
High performance utility library for C
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
go-furnace/go-furnace
Go Hosting Solution for AWS, Google Cloud and Digital Ocean
MITSep 14, 2026 · metrics 2.10.0
Packagist
Nyholm/psr7-server
Helper classes to use any PSR7 implementation as your main request and response
MITOct 24, 2026 · metrics 2.10.0
npm
embedly/embedly-node
Embedly library for node.js
MITSep 10, 2026 · metrics 2.10.0
PyPI
ethz-asl/minkindr
A minimal library for transformations, following the kindr interface. Uses active quaternions of rotation in Hamilton notation.
Custom licenseSep 11, 2026 · metrics 2.10.0
Maven
googleapis/sdk-platform-java
Tooling and shared libraries for Cloud SDK for Java
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI
kip-hart/MicroStructPy
Microstructure modeling, mesh generation, analysis, and visualization.
MITSep 9, 2026 · metrics 2.10.0
Packagist
phpDocumentor/GraphViz
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
PyPI
ryananguiano/async_property
Python decorator for async properties.
MITSep 15, 2026 · metrics 2.10.0
Maven
sebfz1/wicket-jquery-ui
jQuery UI & Kendo UI integration in Wicket
Custom licenseOct 19, 2026 · metrics 2.10.0
npm · crates.io
Zondax/filecoin-solidity
Filecoin Solidity API Library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
genkgo/camt
PHP Parser for CAMT messages
MITSep 14, 2026 · metrics 2.10.0
npm
micromatch/nanomatch
Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but without support for extended globs (extglobs), posix brackets or braces, and with complete Bash 4.3 wildcard support: ("*", "**", and "?").
MITSep 15, 2026 · metrics 2.10.0