Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,781
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
Netflix-Skunkworks/stethoscope-app
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
d3/d3-array
Array manipulation, ordering, searching, summarizing, etc.
ISCAug 31, 2026 · metrics 2.10.0
PyPI
databrickslabs/dbx
🧱 Databricks CLI eXtensions - aka dbx is a CLI tool for development and advanced Databricks workflows management.
Custom licenseAug 23, 2026 · metrics 2.10.0
PyPI
python-xlib/python-xlib
XLib in pure Python (Py2/Py3 compatible)
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
Packagist · npm
mokhosh/filament-kanban
Add kanban boards to your Filament pages
MITJul 22, 2026 · metrics 2.10.0
npm
eslint/doctrine
JSDoc parser
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Maven
JetBrains/java-annotations
Annotations for JVM-based languages.
Apache-2.0Jul 28, 2026 · metrics 2.10.0
—
esrlabs/git-repo
repo - The multiple repository tool (also works on MS Windows!)
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
AztecProtocol/aztec-connect
aztec connect repository
MITJul 23, 2026 · metrics 2.10.0
RubyGems
joshbuddy/jsonpath
Ruby implementation of http://goessner.net/articles/JsonPath/
MITJul 21, 2026 · metrics 2.10.0
—
rackspace/gophercloud
A Go SDK for OpenStack. IN FEATURE FREEZE. See Issue #592
Custom licenseJul 29, 2026 · metrics 2.10.0
—
ruzickap/packer-templates
Scripts and Templates used for generating Vagrant images
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
doowb/ansi-colors
Easily add ANSI colors to your text and symbols in the terminal. ansi-colors is the official ansi styling library for gulp. Used by hundreds of projects, including enquirer, vscode, codeql, azure data studio, aws-cdk, redwoodjs, leaflet, mocha, and many others.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
bebanjo/delorean
DISCONTINUED - Delorean lets you travel in time with Ruby by mocking Time.now
MITJul 22, 2026 · metrics 2.10.0
—
dotnet/core-setup
Installer packages for the .NET Core runtime and libraries
No licenseAug 22, 2026 · metrics 2.10.0
npm
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
MITJul 25, 2026 · metrics 2.10.0
PyPI
python-babel/flask-babel
i18n and l10n support for Flask based on Babel and pytz
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
sindresorhus/p-cancelable
Create a promise that can be canceled
MITAug 29, 2026 · metrics 2.10.0
npm
bruce/node-temp
Temporary File, Directory, and Stream support for Node.js
MITAug 27, 2026 · metrics 2.10.0
Go
goreleaser/godownloader
[DEPRECATED] Download Go binaries as fast and easily as possible.
MITJul 27, 2026 · metrics 2.10.0
npm
devbookhq/splitter
React component for building split views like in VS Code
MITJul 24, 2026 · metrics 2.10.0
PyPI
mesosphere/marathon-lb
Marathon-lb is a service discovery & load balancing tool for DC/OS
Apache-2.0Jul 16, 2026 · metrics 2.10.0
Maven
spinnaker/clouddriver
read and write operations across cloud providers
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
bytedance/matxscript
A high-performance, extensible Python AOT compiler.
Apache-2.0Aug 11, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-cpp
C++ grammar for tree-sitter
MITAug 27, 2026 · metrics 2.10.0
—
fsprojects/FsUnit
FsUnit makes unit-testing with F# more enjoyable. It adds a special syntax to your favorite .NET testing framework.
MITAug 4, 2026 · metrics 2.10.0
Go
StackExchange/wmi
WMI for Go
MITSep 6, 2026 · metrics 2.10.0
Packagist
creocoder/yii2-nested-sets
The nested sets behavior for the Yii framework.
Custom licenseAug 4, 2026 · metrics 2.10.0
NuGet
Azure/azure-storage-net
Microsoft Azure Storage Libraries for .NET
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Packagist
symfony/mercure
The Mercure Component allows to easily push updates to web browsers and other HTTP clients using the Mercure protocol.
MITAug 5, 2026 · metrics 2.10.0