Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,225
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
glenselle/nACH2
nACH is a highly customizable Node.js module exposing a high & low-level API for generating ACH files for use within the ACH network
No licenseOct 18, 2026 · metrics 2.10.0
—
jaegertracing/jaeger-lib
A collection of shared infrastructure libraries used by different components of Jaeger.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Maven
jakartaee/common-annotations-api
Jakarta Annotations
Custom licenseSep 14, 2026 · metrics 2.10.0
PyPI
lava-nc/lava-optimization
Neuromorphic mathematical optimization with Lava
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
crates.io
nixpulvis/oursh
Your comrade through the perilous world of UNIX.
MITOct 19, 2026 · metrics 2.10.0
npm
open-draft/strict-event-emitter
Type-safe EventEmitter for browser and Node.js.
No licenseSep 23, 2026 · metrics 2.10.0
Hex
phoenixframework/phoenix_view
View abstraction for Phoenix v1.0-v1.6
MITSep 11, 2026 · metrics 2.10.0
npm
qri-io/desktop
Qri Desktop
GPL-3.0Sep 10, 2026 · metrics 2.10.0
—
quiet/quiet-dsp
Digital signal processing library
MITSep 15, 2026 · metrics 2.10.0
—
ssfrr/DeepDiffs.jl
Compute and pretty-print diffs for data structures like arrays and dictionaries
Custom licenseOct 14, 2026 · metrics 2.10.0
npm
titicacadev/triple-config-kit
ESLint, Prettier, Stylelint configuration for TRIPLE
MITJul 19, 2026 · metrics 2.10.0
—
CESNET/ipfixcol
IPFIXcol is an implementation of an IPFIX (RFC 7011) collector
Custom licenseSep 10, 2026 · metrics 2.10.0
—
CiscoDevNet/ansible-meraki
Cisco Meraki Ansible Collection
GPL-3.0Oct 8, 2026 · metrics 2.10.0
Go
ConduitIO/bwlimit
Limit the bandwidth of a connection.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Hex
bugsnag-elixir/plugsnag
A Bugsnag notifier for Elixir's plug
MITSep 9, 2026 · metrics 2.10.0
npm
feross/typedarray-to-buffer
Convert a typed array to a Buffer without a copy.
MITOct 21, 2026 · metrics 2.10.0
—
googleapis/python-language
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-language
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
iamport/iamport-rest-client-nodejs
NodeJS사용자를 위한 아임포트 REST API 연동 모듈입니다.
MITSep 26, 2026 · metrics 2.10.0
RubyGems
kramdown/parser-gfm
kramdown-parser-gfm provides a kramdown parser for the GFM dialect of Markdown
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
matttproud/golang_protobuf_extensions
Support for streaming Protocol Buffer messages for the Go language (golang).
Apache-2.0Sep 14, 2026 · metrics 2.10.0
RubyGems
mocktools/ruby-dns-mock
DNS mock server written on 💎 Ruby. Mimic any DNS records for your test environment with fake DNS server.
MITSep 12, 2026 · metrics 2.10.0
Go
pierrec/xxHash
Pure Go implementation of xxHash (32 and 64 bits versions)
BSD-3-ClauseOct 4, 2026 · metrics 2.10.0
npm
radicle-dev/radicle-contracts
Radicle contracts on Ethereum
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
servicemeshinterface/smi-sdk-go
Service Mesh Interface SDK for Go
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
sindresorhus/is-npm
Check if your code is running as an npm or yarn script
MITSep 15, 2026 · metrics 2.10.0
npm
EasyDynamics/oscal-react-library
A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.
MITSep 10, 2026 · metrics 2.10.0
Go · npm
GridProtectionAlliance/osisoftpi-grafana
Grafana Data Source Plugin for the OSIsoft PI System
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
SirusCodes/AntiLang
An esoteric language with an aim to break all the programming conventions
MITOct 22, 2026 · metrics 2.10.0
crates.io
alexcrichton/scoped-tls
Scoped Thread Local Storage for Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
apache/openwhisk-apigateway
Apache OpenWhisk API Gateway service for exposing actions as REST interfaces.
Apache-2.0Sep 25, 2026 · metrics 2.10.0