Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,523
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
evanw/node-source-map-support
Adds source map support to node.js (for stack traces)
MITAug 4, 2026 · metrics 2.10.0
Maven
hamcrest/JavaHamcrest
Java (and original) version of Hamcrest
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
—
dotnet/pinvoke
A library containing all P/Invoke code so you don't have to import it every time. Maintained and updated to support the latest Windows OS.
MITJul 18, 2026 · metrics 2.10.0
npm
dominictarr/event-stream
EventStream is like functional programming meets IO
MITAug 13, 2026 · metrics 2.10.0
RubyGems
rubyconfig/config
Easiest way to add multi-environment yaml settings to Rails, Sinatra, Padrino and other Ruby projects.
Custom licenseJul 22, 2026 · metrics 2.10.0
PyPI
jazzband/django-widget-tweaks
Tweak the form field rendering in templates, not in python-level form definitions. CSS classes and HTML attributes can be altered.
MITAug 13, 2026 · metrics 2.10.0
—
Antaris/RazorEngine
Open source templating engine based on Microsoft's Razor parsing engine
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
gabrielfalcao/HTTPretty
Intercept HTTP requests at the Python socket level. Fakes the whole socket module
MITJul 21, 2026 · metrics 2.10.0
Hex
bitwalker/libcluster
Automatic cluster formation/healing for Elixir applications
MITJul 21, 2026 · metrics 2.10.0
—
leanprover/lean3
Lean Theorem Prover
Apache-2.0Jul 19, 2026 · metrics 2.10.0
PyPI · crates.io
wasmerio/wasmer-python
🐍🕸 WebAssembly runtime for Python
MITAug 13, 2026 · metrics 2.10.0
npm
taylorhakes/promise-polyfill
Lightweight ES6 Promise polyfill for the browser and node. A+ Compliant
MITAug 13, 2026 · metrics 2.10.0
npm
alexei/sprintf.js
sprintf.js is a complete open source JavaScript sprintf implementation
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
Go
cespare/xxhash
A Go implementation of the 64-bit xxHash algorithm (XXH64)
MITJul 28, 2026 · metrics 2.10.0
npm
kubeshop/monokle
Monokle is a set of OSS tools designed to help create and maintain high-quality Kubernetes configurations throughout the application lifecycle
MITJul 24, 2026 · metrics 2.10.0
npm
davidbau/seedrandom
seeded random number generator for Javascript
No licenseAug 13, 2026 · metrics 2.10.0
PyPI
GongRzhe/Office-Word-MCP-Server
A Model Context Protocol (MCP) server for creating, reading, and manipulating Microsoft Word documents. This server enables AI assistants to work with Word documents through a standardized interface, providing rich document editing capabilities.
MITAug 13, 2026 · metrics 2.10.0
npm
FormidableLabs/react-swipeable
React swipe event handler hook
MITAug 27, 2026 · metrics 2.10.0
PyPI
PyFilesystem/pyfilesystem2
Python's Filesystem abstraction layer
MITJul 21, 2026 · metrics 2.10.0
PyPI
RobertCraigie/prisma-client-py
Prisma Client Python is an auto-generated and fully type-safe database client designed for ease of use
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
beberlei/DoctrineExtensions
A set of Doctrine 2 extensions
Custom licenseJul 25, 2026 · metrics 2.10.0
NuGet
prometheus-net/prometheus-net
.NET library to instrument your code with Prometheus metrics
MITJul 28, 2026 · metrics 2.10.0
npm
msaktype/stylefmt
stylefmt is a tool that automatically formats stylesheets.
Custom licenseJul 23, 2026 · metrics 2.10.0
PyPI
pallets-eco/blinker
A fast Python in-process signal/event dispatching system.
MITAug 4, 2026 · metrics 2.10.0
Go
sergi/go-diff
Diff, match and patch text in Go
MITJul 28, 2026 · metrics 2.10.0
PyPI
pydoit/doit
CLI task management & automation tool
MITAug 13, 2026 · metrics 2.10.0
npm
taylorhakes/fecha
Lightweight and simple JS date formatting and parsing
MITAug 13, 2026 · metrics 2.10.0
PyPI
sybrenjansen/mpire
A Python package for easy multiprocessing, but faster than multiprocessing
MITAug 27, 2026 · metrics 2.10.0
PyPI
fugue/credstash
A little utility for managing credentials in the cloud
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
Behat/Transliterator
Behat Transliterator library inherited from Doctrine1 and used in Behat for snippet generation
Custom licenseJul 30, 2026 · metrics 2.10.0