Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,521
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
valyala/fasttemplate
Simple and fast template engine for Go
MITSep 12, 2026 · metrics 2.10.0
PyPI
reingart/pyfpdf
Simple PDF generation for Python (FPDF PHP port)
LGPL-3.0Oct 21, 2026 · metrics 2.10.0
RubyGems
collectiveidea/json_spec
Easily handle JSON in RSpec and Cucumber
MITSep 11, 2026 · metrics 2.10.0
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITSep 16, 2026 · metrics 2.10.0
Go
grandcat/zeroconf
mDNS / DNS-SD Service Discovery in pure Go (also known as Bonjour)
Custom licenseSep 23, 2026 · metrics 2.10.0
crates.io
facebook/winterfell
A STARK prover and verifier for arbitrary computations
MITSep 14, 2026 · metrics 2.10.0
Packagist
ramsey/uuid-doctrine
❄️ 🗄️ Allow the use of a ramsey/uuid UUID as Doctrine field type.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
arches/table_print
The best data slicer! Watch a 3 minute screencast at http://tableprintgem.com
MITSep 11, 2026 · metrics 2.10.0
NuGet · npm
microsoft/botbuilder-dotnet
Welcome to the Bot Framework SDK for .NET repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using .NET.
MITSep 14, 2026 · metrics 2.10.0
PyPI
logpai/Drain3
A robust streaming log template miner based on the Drain algorithm
Custom licenseOct 13, 2026 · metrics 2.10.0
Hex
pragdave/earmark
Markdown parser for Elixir
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
nytimes/gziphandler
Go middleware to gzip HTTP responses
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
estools/esquery
ECMAScript AST query library.
Custom licenseSep 16, 2026 · metrics 2.10.0
Packagist
talyssonoc/react-laravel
Package for using ReactJS with Laravel
No licenseSep 11, 2026 · metrics 2.10.0
NuGet
NModbus4/NModbus4
NModbus4 is a C# implementation of the Modbus protocol. This project is archived in favor of https://github.com/NModbus/NModbus
MITSep 11, 2026 · metrics 2.10.0
npm
deathau/sliding-panes-obsidian
Andy Matuschak Mode as a plugin
No licenseSep 13, 2026 · metrics 2.10.0
npm
steipete/macos-automator-mcp
An MCP server to run AppleScript and JXA (JavaScript for Automation) to macOS.
MITOct 7, 2026 · metrics 2.10.0
PyPI
jazzband/django-nose
Django test runner using nose
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
RubyGems
jekyll/jekyll-feed
:memo: A Jekyll plugin to generate an Atom (RSS-like) feed of your Jekyll posts
MITSep 10, 2026 · metrics 2.10.0
npm
beatgammit/base64-js
Base64 encoding/decoding in pure JS
MITSep 16, 2026 · metrics 2.10.0
Go
quasilyte/go-ruleguard
Define and run pattern-based custom linting rules.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
PyPI
scikit-fuzzy/scikit-fuzzy
Fuzzy Logic SciKit (Toolkit for SciPy)
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
scour-project/scour
Scour - An SVG Optimizer / Cleaner
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
sidorares/json-bigint
JSON.parse/stringify with bigints support
MITSep 23, 2026 · metrics 2.10.0
npm
webpack/memory-fs
[DEPRECATED use memfs instead] A simple in-memory filesystem. Holds data in a javascript object.
MITSep 23, 2026 · metrics 2.10.0
Packagist
bjeavons/zxcvbn-php
Realistic PHP password strength estimate library based on Zxcvbn JS
MITSep 18, 2026 · metrics 2.10.0
—
StevenBaby/onix
Onix - 操作系统实现
MITSep 15, 2026 · metrics 2.10.0
RubyGems
rubychan/coderay
Fast and easy syntax highlighting for selected languages, written in Ruby.
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
berkerpeksag/astor
Python AST read/write
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
—
jthuraisamy/TelemetrySourcerer
Enumerate and disable common sources of telemetry used by AV/EDR.
Apache-2.0Sep 16, 2026 · metrics 2.10.0