Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,560
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
webpack-contrib/file-loader
File Loader
MITAug 13, 2026 · metrics 2.10.0
PyPI
descriptinc/descript-audio-codec
State-of-the-art audio codec with 90x compression factor. Supports 44.1kHz, 24kHz, and 16kHz mono/stereo audio.
MITAug 13, 2026 · metrics 2.10.0
Packagist
schmittjoh/metadata
Metadata is a library for metadata management in PHP
MITAug 4, 2026 · metrics 2.10.0
RubyGems
DamirSvrtan/fasterer
:zap: Don't make your Rubies go fast. Make them go fasterer ™. :zap:
MITJul 30, 2026 · metrics 2.10.0
—
georgezhao2010/midea_ac_lan
Auto-configure and then control your Midea M-Smart devices (Air conditioner, Fan, Water heater, Washer, etc) via local area network.
MITAug 28, 2026 · metrics 2.10.0
npm
hughsk/flat
:steam_locomotive: Flatten/unflatten nested Javascript objects
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
frenic/csstype
Strict TypeScript and Flow types for style based on MDN data
MITAug 4, 2026 · metrics 2.10.0
npm
mridgway/hoist-non-react-statics
Copies non-react specific statics from a child component to a parent component
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
catherinedevlin/ipython-sql
%%sql magic for IPython, hopefully evolving into full SQL client
MITAug 13, 2026 · metrics 2.10.0
npm
nexxtway/react-rainbow
🌈 React Rainbow Components. Build your web application in a snap.
MITJul 26, 2026 · metrics 2.10.0
npm
ilearnio/module-alias
Register aliases of directories and custom module paths in Node
MITAug 13, 2026 · metrics 2.10.0
—
gettalong/kramdown
kramdown is a fast, pure Ruby Markdown superset converter, using a strict syntax definition and supporting several common extensions.
Custom licenseJul 21, 2026 · metrics 2.10.0
npm
ThomasAribart/json-schema-to-ts
Infer TS types from JSON schemas 📝
MITAug 13, 2026 · metrics 2.10.0
npm
medikoo/memoizee
Complete memoize/cache solution for JavaScript
ISCAug 13, 2026 · metrics 2.10.0
npm
Noovolari/leapp
Leapp is the DevTool to access your cloud
MPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
django-money/django-money
Money fields for Django forms and models.
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
danielgtaylor/python-betterproto
Clean, modern, Python 3.6+ code generator & library for Protobuf 3 and async gRPC
MITAug 13, 2026 · metrics 2.10.0
Go
SpatiumPortae/portal
Portal is a quick and easy command-line file transfer utility from any computer to another 🌌 ✨
MITAug 20, 2026 · metrics 2.10.0
npm
indutny/elliptic
Fast Elliptic Curve Cryptography in plain javascript
No licenseAug 7, 2026 · metrics 2.10.0
PyPI
mpdavis/python-jose
A JOSE implementation in Python
MITAug 27, 2026 · metrics 2.10.0
npm
que-etc/resize-observer-polyfill
A polyfill for the Resize Observer API
MITAug 13, 2026 · metrics 2.10.0
crates.io
queer/boxxy
boxxy puts bad Linux applications in a box with only their files.
MITAug 23, 2026 · metrics 2.10.0
Go
gorilla/handlers
Package gorilla/handlers is a collection of useful middleware for Go HTTP services & web applications 🛃
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
npm
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
ISCAug 4, 2026 · metrics 2.10.0
npm
WebDevStudios/Custom-Metaboxes-and-Fields-for-WordPress
Lets you easily create metaboxes with custom fields that will blow your mind.
No licenseJul 22, 2026 · metrics 2.10.0
npm
rvagg/node-worker-farm
Distribute processing tasks to child processes with an über-simple API and baked-in durability & custom concurrency options.
Custom licenseAug 13, 2026 · metrics 2.10.0
Go
tj/mmake
Modern Make
No licenseAug 18, 2026 · metrics 2.10.0
Go
mitchellh/cli
A Go library for implementing command-line interfaces.
MPL-2.0Aug 29, 2026 · metrics 2.10.0
npm
lukeed/klona
A tiny (240B to 501B) and fast utility to "deep clone" Objects, Arrays, Dates, RegExps, and more!
MITAug 13, 2026 · metrics 2.10.0
Go
grafana-cold-storage/agent
Vendor-neutral programmable observability pipelines.
Apache-2.0Aug 22, 2026 · metrics 2.10.0