Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,121
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
gtk-rs/glib
DEPRECATED, use https://github.com/gtk-rs/gtk-rs-core repository instead!
MITSep 18, 2026 · metrics 2.10.0
npm
iden3/circomlibjs
Javascript library to work with circomlib circuits
No licenseSep 20, 2026 · metrics 2.10.0
RubyGems
jekyll/jekyll-watch
:eyes: Rebuild your Jekyll site when a file changes with the `--watch` switch.
MITSep 10, 2026 · metrics 2.10.0
RubyGems
mbklein/equivalent-xml
Easy equivalency tests for Nokogiri and Oga XML
MITSep 11, 2026 · metrics 2.10.0
npm
mpfast/TaroCreator
微信小程序 小程序模板 小程序可视化设计工具 Taro Taro UI
MITSep 13, 2026 · metrics 2.10.0
npm
pierrec/node-eval
Evaluate node require() module content directly
MITSep 23, 2026 · metrics 2.10.0
npm
primefaces/primeuix
PrimeUIX is a shared package used by all Prime libraries, allowing PrimeTek teams to unify theming.
MITOct 22, 2026 · metrics 2.10.0
RubyGems
qltysh-archive/ruby-test-reporter
DEPRECATED Uploads Ruby test coverage data to Code Climate
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
remyoudompheng/bigfft
Big integer multiplication library for Go using Fast Fourier transform
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
request/caseless
Caseless object set/get/has, very useful when working with HTTP headers.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
sindresorhus/base62
Encode & decode strings, bytes, and integers to Base62
MITSep 23, 2026 · metrics 2.10.0
npm
sindresorhus/has-flag
Check if argv has a specific flag
MITSep 16, 2026 · metrics 2.10.0
RubyGems
w3c-validators/w3c_validators
A Ruby wrapper for the World Wide Web Consortium’s online validation services.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
CircleCI-Public/mcp-server-circleci
A specialized server implementation for the Model Context Protocol (MCP) designed to integrate with CircleCI's development workflow. This project serves as a bridge between CircleCI's infrastructure and the Model Context Protocol, enabling enhanced AI-powered development experiences.
Custom licenseSep 13, 2026 · metrics 2.10.0
Go · npm
ScaCap/action-surefire-report
Reports surefire test results as GitHub Pull Request Check
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
agext/levenshtein
Levenshtein distance and similarity metrics with customizable edit costs and Winkler-like bonus for common prefix.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
alexcrichton/xz2-rs
Bindings to liblzma in Rust (xz streams in Rust)
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Packagist
andalisolutions/anaf-php
ANAF PHP is a free PHP API client that allows you to interact with the ANAF Web Services.
MITSep 17, 2026 · metrics 2.10.0
PyPI
canonical/sec-cvescan
Analyzes an Ubuntu system and checks for unpatched vulnerabilities.
GPL-3.0Oct 23, 2026 · metrics 2.10.0
npm
feross/is-buffer
Determine if an object is a Buffer
MITOct 20, 2026 · metrics 2.10.0
npm
kesla/node-headless
Headless is a Node.js wrapper for Xvfb, the virtual framebuffer
Custom licenseSep 20, 2026 · metrics 2.10.0
RubyGems
khiav223577/rails_or
Cleaner syntax for writing OR Query in Rails 5, 6. And also add #or support to Rails 3 and 4.
MITSep 11, 2026 · metrics 2.10.0
npm
lydell/source-map-resolve
[DEPRECATED] Resolve the source map and/or sources for a generated file.
MITSep 15, 2026 · metrics 2.10.0
npm
mafintosh/thunky
Delay the evaluation of a paramless async function and cache the result
MITOct 21, 2026 · metrics 2.10.0
Go
open-telemetry/opentelemetry-log-collection
OpenTelemetry log collection library
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
sbintuitions/JMTEB
The evaluation scripts of JMTEB (Japanese Massive Text Embedding Benchmark)
CC-BY-SA-4.0Sep 29, 2026 · metrics 2.10.0
npm
vectara/react-chatbot
UI widget for adding a chatbot to your React UI in just a few lines of code
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Hex
allegro/ecto-cursor-based-stream
Elixir library that allows for cursor-based streaming of Ecto records, that does not require database transaction.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
benjamn/wryware
A collection of packages that are probably a little too clever. Use at your own wrisk.
MITOct 22, 2026 · metrics 2.10.0
npm
cshaa/filtrex
A simple, safe, JavaScript Filter Expression compiler for end-users
MITSep 20, 2026 · metrics 2.10.0