Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,299
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
microsoft/eslint-plugin-sdl
ESLint Plugin focused on common security issues and misconfigurations.
MITOct 24, 2026 · metrics 2.10.0
Hex
prometheus-erl/prometheus_process_collector
Prometheus.io process collector in Erlang
MITSep 9, 2026 · metrics 2.10.0
—
spekt/nunit.testlogger
NUnit logger for vstest platform (<= v3.x)
MITSep 11, 2026 · metrics 2.10.0
npm
vadimdemedes/minimist-options
Clean and beautiful options for minimist
MITOct 21, 2026 · metrics 2.10.0
Go · npm
JackDallas/Premiumizearr
Bridge your *Arr clients (Sonarr, Radarr) to your premiumize.me (upload/download manager)
GPL-3.0Oct 21, 2026 · metrics 2.10.0
Hex
Supersonido/rebar_mix
rebar3 plugin for building Elixir dependencies with mix
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
calipho-sib/sequence-viewer
neXtProt protein sequence viewer (javascript) - From SIB CALIPHO group; neXtProt project
No licenseOct 22, 2026 · metrics 2.10.0
Hex
elixir-nx/stb_image
A tiny image library using stb_image as the backend
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
foliojs/tiny-inflate
A tiny inflate implementation
MITSep 23, 2026 · metrics 2.10.0
npm
mjknowles/matrix-mcp-server
MCP Server for a Matrix home server integration; chat, manage rooms, etc.
MITSep 19, 2026 · metrics 2.10.0
npm
msrose/babel-plugin-transform-amd-to-commonjs
:sparkles: Babel plugin that transforms AMD to CommonJS
MITSep 29, 2026 · metrics 2.10.0
RubyGems
rails/builder
Provide a simple way to create XML markup and data structures.
MITSep 12, 2026 · metrics 2.10.0
Go
rocketsciencegg/go-ts3
A golang TeamSpeak 3 ServerQuery client
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
RubyGems
rubycocos/markdown
markdown tools, libraries & scripts
CC0-1.0Oct 20, 2026 · metrics 2.10.0
npm
samsonjs/format
printf-like formatting for JavaScript
MITOct 21, 2026 · metrics 2.10.0
npm
sindresorhus/p-each-series
Iterate over promises serially
MITSep 15, 2026 · metrics 2.10.0
npm
tad-lispy/node-damerau-levenshtein
Damerau - Levenstein distance function for node
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
crates.io
unicode-rs/unicode-xid
No repository description published.
Custom licenseSep 16, 2026 · metrics 2.10.0
Hex
uwiger/edown
EDoc extension for generating Github-flavored Markdown
No licenseOct 25, 2026 · metrics 2.10.0
npm
vercel/body-scroll-lock
Body scroll locking that just works with everything 😏
MITSep 19, 2026 · metrics 2.10.0
NuGet
Azure/azure-documentdb-changefeedprocessor-dotnet
This library provides a host for distributing change feed events in partitioned collection across multiple observers. Instances of the host can scale up (by adding) or down (by removing) dynamically, and the load will be automatically distributed among active instances in about-equal way.
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
BolajiOlajide/ng-banks
Lightweight Zero dependency npm package to get list of banks in Nigeria (Recognized by CBN)
No licenseOct 22, 2026 · metrics 2.10.0
—
CTUAvastLab/JsonGrinder.jl
Machine learning with Mill.jl for JSON documents
Custom licenseOct 18, 2026 · metrics 2.10.0
NuGet
JPlenert/QRCoder-ImageSharp
A pure C# Open Source QR Code implementation using ImageSharp.
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
Jille/raft-grpc-transport
Make hashicorp/raft communicate over gRPC
BSD-2-ClauseSep 14, 2026 · metrics 2.10.0
PyPI
JinyuanSun/DDGScan
DDGScan: an integrated parallel workflow for the in silico point mutation scan of protein
MITOct 22, 2026 · metrics 2.10.0
—
Pressio/pressio-rom
linear and non-linear solvers, time integration, roms
Custom licenseSep 13, 2026 · metrics 2.10.0
RubyGems
danielfriis/ruby_llm-template
Organize prompts into reusable templates for RubyLLM
MITOct 20, 2026 · metrics 2.10.0
crates.io
ebkalderon/renderdoc-rs
RenderDoc application bindings for Rust
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist · npm
fatturaelettronicaphp/FatturaElettronica
Pacchetto PHP per la lettura, la generazione e la validazione della fattura elettronica, sia per la Pubblica Amministrazione che tra privati (B2B)
MITSep 17, 2026 · metrics 2.10.0