Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,390
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
hughsk/flat
:steam_locomotive: Flatten/unflatten nested Javascript objects
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
RubyGems
pages-themes/minimal
Minimal is a Jekyll theme for GitHub Pages
CC0-1.0Sep 10, 2026 · metrics 2.10.0
Hex
bitwalker/timex
A complete date/time library for Elixir projects.
MITSep 9, 2026 · metrics 2.10.0
npm
mridgway/hoist-non-react-statics
Copies non-react specific statics from a child component to a parent component
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
catherinedevlin/ipython-sql
%%sql magic for IPython, hopefully evolving into full SQL client
MITSep 17, 2026 · metrics 2.10.0
npm · Maven · PyPI
microsoft/Recognizers-Text
Microsoft.Recognizers.Text provides recognition and resolution of numbers, units, date/time, etc. in multiple languages (ZH, EN, FR, ES, PT, DE, IT, TR, HI, NL. Partial support for JA, KO, AR, SV). Packages available at: https://www.nuget.org/profiles/Recognizers.Text, https://www.npmjs.com/~recognizers.text
MITSep 11, 2026 · metrics 2.10.0
npm
nexxtway/react-rainbow
🌈 React Rainbow Components. Build your web application in a snap.
MITSep 13, 2026 · metrics 2.10.0
npm
ilearnio/module-alias
Register aliases of directories and custom module paths in Node
MITSep 17, 2026 · metrics 2.10.0
Go
jinzhu/configor
Golang Configuration tool that support YAML, JSON, TOML, Shell Environment
MITSep 30, 2026 · metrics 2.10.0
npm
ThomasAribart/json-schema-to-ts
Infer TS types from JSON schemas 📝
MITSep 17, 2026 · metrics 2.10.0
—
gettalong/kramdown
kramdown is a fast, pure Ruby Markdown superset converter, using a strict syntax definition and supporting several common extensions.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
medikoo/memoizee
Complete memoize/cache solution for JavaScript
ISCSep 17, 2026 · metrics 2.10.0
PyPI
requests/requests-oauthlib
OAuthlib support for Python-Requests!
ISCSep 9, 2026 · metrics 2.10.0
npm
Noovolari/leapp
Leapp is the DevTool to access your cloud
MPL-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
django-money/django-money
Money fields for Django forms and models.
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
octo-models/octo
Octo is a transformer-based robot policy trained on a diverse mix of 800k robot trajectories.
MITSep 14, 2026 · metrics 2.10.0
PyPI
danielgtaylor/python-betterproto
Clean, modern, Python 3.6+ code generator & library for Protobuf 3 and async gRPC
MITSep 17, 2026 · metrics 2.10.0
RubyGems
fphilipe/premailer-rails
CSS styled emails without the hassle.
MITSep 11, 2026 · metrics 2.10.0
npm
indutny/elliptic
Fast Elliptic Curve Cryptography in plain javascript
No licenseSep 17, 2026 · metrics 2.10.0
Go
SpatiumPortae/portal
Portal is a quick and easy command-line file transfer utility from any computer to another 🌌 ✨
MITOct 19, 2026 · metrics 2.10.0
crates.io
cnosdb/cnosdb
A cloud-native open source distributed time series database with high performance, high compression ratio and high availability.
AGPL-3.0Sep 15, 2026 · metrics 2.10.0
PyPI
mpdavis/python-jose
A JOSE implementation in Python
MITAug 27, 2026 · metrics 2.10.0
npm
phosphor-icons/react
A flexible icon family for React
MITSep 17, 2026 · metrics 2.10.0
npm
que-etc/resize-observer-polyfill
A polyfill for the Resize Observer API
MITSep 17, 2026 · metrics 2.10.0
npm
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
ISCSep 16, 2026 · metrics 2.10.0
Go
grafana-cold-storage/agent
Vendor-neutral programmable observability pipelines.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
gorilla/handlers
Package gorilla/handlers is a collection of useful middleware for Go HTTP services & web applications 🛃
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
crates.io
queer/boxxy
boxxy puts bad Linux applications in a box with only their files.
MITAug 23, 2026 · metrics 2.10.0
PyPI
rspeer/wordfreq
Access a database of word frequencies, in various natural languages.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
tj/mmake
Modern Make
No licenseOct 19, 2026 · metrics 2.10.0