Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,225
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
bizley/yii2-jwt
JWT Integration for Yii 2
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
didilinkin/elf-taro
Taro 小程序 脚手架 (Taro 3 + Dva + Typescript + Immer) - 内置 Redux 计数器, 异步数据请求 与 腾讯小程序地图 demo
MITSep 13, 2026 · metrics 2.10.0
npm
feross/fromentries
Object.fromEntries() ponyfill (in 6 lines)
MITSep 23, 2026 · metrics 2.10.0
—
fluent/fluent-bit-docker-image
Docker image for Fluent Bit
Apache-2.0Oct 10, 2026 · metrics 2.10.0
npm
jaredhanson/utils-merge
merge() utility function
MITSep 16, 2026 · metrics 2.10.0
npm
lezer-parser/common
Packed syntax tree data structure
MITSep 23, 2026 · metrics 2.10.0
crates.io
murarth/assert_matches
Provides macro `assert_matches` for testing pattern matching
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
rails/activemodel-serializers-xml
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
Go
rancher-archives/hypper
No repository description published.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
RubyGems
rubyworks/hashery
Facets Hashery Collection of Hash-based classes
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
shibukawa/oktavia
Full text search engine for JS environments
MITOct 21, 2026 · metrics 2.10.0
npm
sindresorhus/semver-diff
Get the diff type of two semver versions: 0.0.1 0.0.2 → patch
MITSep 15, 2026 · metrics 2.10.0
npm
3dmind/jest-sonar-reporter
A Sonar test reporter for Jest.
MITOct 24, 2026 · metrics 2.10.0
Go · npm
Altinity/altinity-dashboard
Altinity Dashboard helps you manage ClickHouse installations controlled by clickhouse-operator.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
ROCm/hipSPARSE
[DEPRECATED] Moved to ROCm/rocm-libraries repo
MITOct 24, 2026 · metrics 2.10.0
—
UCLOrengoGroup/cath-tools
Protein structure comparison tools such as SSAP and SNAP
GPL-3.0Oct 22, 2026 · metrics 2.10.0
PyPI
agentmail-to/agentmail-python
No repository description published.
MITSep 25, 2026 · metrics 2.10.0
npm
microstates/ember
@microstates/ember - Official Microstates bindings for Ember.js
MITOct 22, 2026 · metrics 2.10.0
npm
mixmaxhq/search-string
Another simple parser for advanced search query syntax.
MITSep 15, 2026 · metrics 2.10.0
Go
otterize/credentials-operator
Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud
Apache-2.0Sep 13, 2026 · metrics 2.10.0
RubyGems
piotrmurach/tty-file
File manipulation utility methods
MITSep 11, 2026 · metrics 2.10.0
RubyGems
prawnpdf/prawn-templates
Experimental extraction of template features from Prawn
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
purescript/purescript-record
Functions for working with records and polymorphic labels
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
RubyGems
sstephenson/ruby-eco
Ruby Eco Compiler
MITSep 12, 2026 · metrics 2.10.0
RubyGems
yujinakayama/astrolabe
An object-oriented Ruby AST extension for Parser
MITSep 11, 2026 · metrics 2.10.0
PyPI
AOMediaCodec/av1-isobmff
Official specification of the AOM group for the carriage of AV1 in ISOBMFF
No licenseOct 18, 2026 · metrics 2.10.0
npm
Flagsmith/flagsmith-js-client
Javascript Client for Flagsmith. Ship features with confidence using feature flags and remote config. Host yourself or use our hosted version at https://www.flagsmith.com/
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
aesara-devs/aeppl
Tools for an Aesara-based PPL.
MITOct 4, 2026 · metrics 2.10.0
npm
cowboy/node-exit
A replacement for process.exit that ensures stdio are fully drained before exiting.
MITOct 20, 2026 · metrics 2.10.0
npm
fjc0k/mounted
基于 Taro 的小程序组件库。
MITSep 13, 2026 · metrics 2.10.0