Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,024
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
d3/d3-polygon
Geometric operations for two-dimensional polygons.
ISCSep 15, 2026 · metrics 2.10.0
PyPI
nod-ai/AMD-SHARK-ModelDev
Unified compiler/runtime for interfacing with PyTorch Dynamo.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
duplojs/zod-accelerator
No repository description published.
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
phpDocumentor/GraphViz
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
PyPI
ryananguiano/async_property
Python decorator for async properties.
MITSep 15, 2026 · metrics 2.10.0
npm · crates.io
Zondax/filecoin-solidity
Filecoin Solidity API Library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
micromatch/nanomatch
Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but without support for extended globs (extglobs), posix brackets or braces, and with complete Bash 4.3 wildcard support: ("*", "**", and "?").
MITSep 15, 2026 · metrics 2.10.0
crates.io
davidpdrsn/assert-json-diff
Easily compare two JSON values and get great output
MITSep 17, 2026 · metrics 2.10.0
crates.io
kornelski/deunicode
Convert Unicode to ASCII "Ôóű, 🦄☣ in 北亰" :arrow_right: "Oou, unicorn face biohazard in Bei Jing"
Custom licenseSep 18, 2026 · metrics 2.10.0
—
shadowproject/shadow
ShadowCore integration/staging tree
MITSep 19, 2026 · metrics 2.10.0
Packagist
akeneo/api-php-client
PHP client of Akeneo PIM API
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
briancurtin/deprecation
A library to handle automated deprecations
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
browserify/diffie-hellman
pure js diffie-hellman
MITSep 15, 2026 · metrics 2.10.0
npm
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
MITSep 16, 2026 · metrics 2.10.0
crates.io
gtk-rs/glib
DEPRECATED, use https://github.com/gtk-rs/gtk-rs-core repository instead!
MITSep 18, 2026 · metrics 2.10.0
npm
iden3/circomlibjs
Javascript library to work with circomlib circuits
No licenseSep 20, 2026 · metrics 2.10.0
npm
sindresorhus/has-flag
Check if argv has a specific flag
MITSep 16, 2026 · metrics 2.10.0
Go · npm
ScaCap/action-surefire-report
Reports surefire test results as GitHub Pull Request Check
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Packagist
andalisolutions/anaf-php
ANAF PHP is a free PHP API client that allows you to interact with the ANAF Web Services.
MITSep 17, 2026 · metrics 2.10.0
npm
kesla/node-headless
Headless is a Node.js wrapper for Xvfb, the virtual framebuffer
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
lydell/source-map-resolve
[DEPRECATED] Resolve the source map and/or sources for a generated file.
MITSep 15, 2026 · metrics 2.10.0
npm
vectara/react-chatbot
UI widget for adding a chatbot to your React UI in just a few lines of code
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
cshaa/filtrex
A simple, safe, JavaScript Filter Expression compiler for end-users
MITSep 20, 2026 · metrics 2.10.0
Go
CAFxX/httpcompression
Go middleware to compress HTTP responses with Gzip, Deflate, Brotli, Zstandard, XZ/LZMA2, LZ4, and more..
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
Dynatrace/dynatrace-oneagent-operator
Kubernetes/Openshift Operator for managing Dynatrace OneAgent deployments
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
yeya24/promlinter
No repository description published.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
silverwind/default-gateway
Get the default network gateway, cross-platform.
No licenseSep 15, 2026 · metrics 2.10.0
—
watr/mbeacon
Turn your mac into an iBeacon.
MITSep 16, 2026 · metrics 2.10.0
—
JuliaPlanners/PDDL.jl
Julia parser, interpreter and compiler interface for the Planning Domain Definition Language (PDDL). Planners not included.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
SimonSapin/rust-std-candidates
Candidates for inclusion in the Rust standard library
MITSep 18, 2026 · metrics 2.10.0