Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,567
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
composer/package-versions-deprecated
:package: Composer addon to efficiently get installed packages' version numbers
MITAug 27, 2026 · metrics 2.10.0
PyPI
rq/rq-scheduler
A lightweight library that adds job scheduling capabilities to RQ (Redis Queue)
MITAug 13, 2026 · metrics 2.10.0
Packagist
MarkBaker/PHPMatrix
PHP Class for handling Matrices
MITAug 27, 2026 · metrics 2.10.0
PyPI
selwin/python-user-agents
A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
MITAug 27, 2026 · metrics 2.10.0
Maven
mircokroon/minecraft-world-downloader
Download Minecraft worlds, extend server's render distance. 1.12.2 - 1.21
GPL-3.0Jul 28, 2026 · metrics 2.10.0
npm
ricmoo/aes-js
A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.
MITAug 13, 2026 · metrics 2.10.0
RubyGems
facebook/facebook-sdk-swift
Integrate your iOS apps in Swift with Facebook Platform.
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
scottie1984/swagger-ui-express
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
MITAug 13, 2026 · metrics 2.10.0
Go
google/gofuzz
Fuzz testing for go.
Apache-2.0Jul 30, 2026 · metrics 2.10.0
Go
mitchellh/go-ps
Find, list, and inspect processes from Go (golang).
MITJul 30, 2026 · metrics 2.10.0
RubyGems
brianmario/yajl-ruby
A streaming JSON parsing and encoding library for Ruby (C bindings to yajl)
MITJul 22, 2026 · metrics 2.10.0
RubyGems
slack-notifier/slack-notifier
A simple wrapper for posting to slack channels
MITJul 28, 2026 · metrics 2.10.0
—
jimeh/tmuxifier
Tmuxify your Tmux. Powerful session, window & pane management for Tmux.
MITAug 22, 2026 · metrics 2.10.0
npm
element-hq/element-desktop
A glossy Matrix collaboration client for desktop.
AGPL-3.0Jul 19, 2026 · metrics 2.10.0
PyPI
CamDavidsonPilon/lifetimes
Lifetime value in Python
MITAug 13, 2026 · metrics 2.10.0
npm
puleos/object-hash
Generate hashes from javascript objects in node and the browser.
MITAug 13, 2026 · metrics 2.10.0
PyPI
google-deepmind/jraph
A Graph Neural Network Library in Jax
Apache-2.0Aug 13, 2026 · metrics 2.10.0
RubyGems
technicalpickles/jeweler
Opinionated tool for creating and managing Rubygem projects
MITAug 22, 2026 · metrics 2.10.0
PyPI
mmatl/pyrender
Easy-to-use glTF 2.0-compliant OpenGL renderer for visualization of 3D scenes.
MITAug 13, 2026 · metrics 2.10.0
npm
lukeed/dequal
A tiny (304B to 489B) utility to check for deep equality
MITAug 4, 2026 · metrics 2.10.0
Go
peterbourgon/diskv
A disk-backed key-value store.
MITJul 30, 2026 · metrics 2.10.0
Packagist
roach-php/core
The complete web scraping toolkit for PHP.
No licenseJul 27, 2026 · metrics 2.10.0
PyPI
PyCQA/pyflakes
A simple program which checks Python source files for errors
MITAug 4, 2026 · metrics 2.10.0
NuGet
mono/taglib-sharp
Library for reading and writing metadata in media files
LGPL-2.1Jul 22, 2026 · metrics 2.10.0
Go
uber-go/atomic
Wrapper types for sync/atomic which enforce atomic access
MITAug 22, 2026 · metrics 2.10.0
npm
scroll-into-view/scroll-into-view-if-needed
Element.scrollIntoView ponyfills for things like "if-needed" and "smooth"
MITAug 13, 2026 · metrics 2.10.0
npm
sezna/nps
NPM Package Scripts -- All the benefits of npm scripts without the cost of a bloated package.json and limits of json
MITJul 24, 2026 · metrics 2.10.0
PyPI
lepture/flask-oauthlib
YOU SHOULD USE https://github.com/lepture/authlib
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
crates.io
ferrilab/bitvec
A crate for managing memory bit by bit
MITAug 8, 2026 · metrics 2.10.0
Packagist
composer/installers
A Multi-Framework Composer Library Installer
MITAug 27, 2026 · metrics 2.10.0