Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,121
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
sebfz1/wicket-jquery-ui
jQuery UI & Kendo UI integration in Wicket
Custom licenseOct 19, 2026 · metrics 2.10.0
npm · crates.io
Zondax/filecoin-solidity
Filecoin Solidity API Library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
genkgo/camt
PHP Parser for CAMT messages
MITSep 14, 2026 · metrics 2.10.0
npm
micromatch/nanomatch
Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but without support for extended globs (extglobs), posix brackets or braces, and with complete Bash 4.3 wildcard support: ("*", "**", and "?").
MITSep 15, 2026 · metrics 2.10.0
Hex
mirego/credo_naming
🏷 A suite of Credo checks to enforce naming best practices in an Elixir project
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
RubyGems
piotrmurach/tty-reader
A set of methods for processing keyboard input in character, line and multiline modes.
MITSep 11, 2026 · metrics 2.10.0
NuGet
serilog/serilog-enrichers-environment
Enrich Serilog log events with properties from System.Environment.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
crates.io
0xMiden/air-script
A domain-specific language for writing AIR constraints for STARKs
MITSep 13, 2026 · metrics 2.10.0
Packagist
FriendsOfBehat/MinkBrowserKitDriver
Symfony2 BrowserKit driver for Mink framework
MITSep 14, 2026 · metrics 2.10.0
PyPI
LowinLi/transformers-stream-generator
This is a text generation method which returns a generator, streaming out each token in real-time during inference, based on Huggingface/Transformers.
MITSep 12, 2026 · metrics 2.10.0
crates.io
davidpdrsn/assert-json-diff
Easily compare two JSON values and get great output
MITSep 17, 2026 · metrics 2.10.0
crates.io
kornelski/deunicode
Convert Unicode to ASCII "Ôóű, 🦄☣ in 北亰" :arrow_right: "Oou, unicorn face biohazard in Bei Jing"
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
kr/text
Miscellaneous functions for formatting text
MITSep 14, 2026 · metrics 2.10.0
npm
milvus-io/milvus-insight
Milvus management GUI
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
nightscout/share2nightscout-bridge
azure sidecar, bridges Dexcom share2 to Nightscout
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
rdohms/dms-filter
Library that offers Input Filtering based on Annotations for use with Objects. Check out 2.dev for 2.0 pre-release.
MITSep 13, 2026 · metrics 2.10.0
—
shadowproject/shadow
ShadowCore integration/staging tree
MITSep 19, 2026 · metrics 2.10.0
—
vjik/arcticModal
jQuery plugin for modal boxes development. See more here: http://arcticlab.ru/arcticmodal/
No licenseSep 11, 2026 · metrics 2.10.0
PyPI
willtrnr/pyxlsb
Excel 2007+ Binary Workbook (xlsb) reader for Python
LGPL-3.0Oct 24, 2026 · metrics 2.10.0
RubyGems
TwP/inifile
Native Ruby package for reading and writing INI files
No licenseSep 12, 2026 · metrics 2.10.0
Packagist
akeneo/api-php-client
PHP client of Akeneo PIM API
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
apenwarr/mkdocs-exclude
A mkdocs plugin that lets you exclude files or trees from your output.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
briancurtin/deprecation
A library to handle automated deprecations
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
browserify/diffie-hellman
pure js diffie-hellman
MITSep 15, 2026 · metrics 2.10.0
Go
chai2010/gettext-go
:ab: GNU gettext for Go (Imported By Kubernetes)
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
PyPI
coinbase/cdp-sdk-python
No repository description published.
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
MITSep 16, 2026 · metrics 2.10.0
NuGet
trbenning/serilog-sinks-xunit
The xunit test output sink for Serilog
MITSep 11, 2026 · metrics 2.10.0
RubyGems
e2/nenv
Convenient wrapper for Ruby's ENV
MITSep 11, 2026 · metrics 2.10.0
Go
elastic/go-windows
go-windows provides Go wrappers for Windows APIs.
Apache-2.0Sep 23, 2026 · metrics 2.10.0