Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,793
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
mjackson/citrus
Parsing Expressions for Ruby
No licenseJul 22, 2026 · metrics 2.10.0
—
ooc-lang/rock
:ocean: self-hosted ooc compiler that generates c99
MITJul 28, 2026 · metrics 2.10.0
PyPI
PyYoshi/cChardet
universal character encoding detector
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
troygoode/node-require-directory
Recursively iterates over specified directory, requiring each file, and returning a nested hash structure containing those libraries.
MITAug 4, 2026 · metrics 2.10.0
Go
iancoleman/orderedmap
orderedmap is a golang map where the keys keep the order that they're added. It can be de/serialized from/to JSON. It's based closely on the python collections.OrderedDict.
MITSep 5, 2026 · metrics 2.10.0
—
relevance/rcov
The new home of RCov on GitHub
Custom licenseJul 22, 2026 · metrics 2.10.0
npm · Go
humpback/humpback
Lightweight platform for managing containerized services.
Apache-2.0Aug 1, 2026 · metrics 2.10.0
Go
nxadm/tail
[Revamped] Go package for reading from continuously updated files (tail -f)
MITAug 4, 2026 · metrics 2.10.0
Go
go-stack/stack
Package stack implements utilities to capture, manipulate, and format call stacks.
MITAug 29, 2026 · metrics 2.10.0
crates.io
bluss/maplit
Rust container / collection literal macros for HashMap, HashSet, BTreeMap, BTreeSet.
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
lukeed/resolve.exports
A tiny (952b), correct, general-purpose, and configurable `"exports"` and `"imports"` resolver without file-system reliance
MITAug 22, 2026 · metrics 2.10.0
RubyGems
ruby-rdf/rdf
RDF.rb is a pure-Ruby library for working with Resource Description Framework (RDF) data.
UnlicenseJul 22, 2026 · metrics 2.10.0
PyPI
backstage/mkdocs-monorepo-plugin
✚ Build multiple documentation folders in a single Mkdocs. Designed for large codebases.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
npm
max-mapper/extract-zip
Zip extraction written in pure JavaScript. Extracts a zip into a directory.
BSD-2-ClauseAug 31, 2026 · metrics 2.10.0
PyPI
box/flaky
Plugin for nose or pytest that automatically reruns flaky tests.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
crates.io · PyPI
DeFiCh/ain
DeFi Blockchain - enabling decentralized finance on Bitcoin
MITAug 12, 2026 · metrics 2.10.0
Go
pkg/term
Package term manages POSIX terminals.
BSD-2-ClauseAug 29, 2026 · metrics 2.10.0
PyPI
TvoroG/pytest-lazy-fixture
It helps to use fixtures in pytest.mark.parametrize
MITAug 24, 2026 · metrics 2.10.0
—
googleapis/python-dialogflow
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-dialogflow
Apache-2.0Jul 29, 2026 · metrics 2.10.0
Go
niklasfasching/go-org
Org mode parser with html & pretty printed org rendering. also shitty static site generator.
MITJul 28, 2026 · metrics 2.10.0
npm
yargs/cliui
easily create complex multi-column command-line-interfaces.
ISCAug 4, 2026 · metrics 2.10.0
crates.io
Michael-F-Bryan/include_dir
The logical evolution of the include_str macro for embedding a directory tree into your binary.
MITAug 13, 2026 · metrics 2.10.0
npm
evanderkoogh/otel-cf-workers
An OpenTelemetry compatible library for instrumenting and exporting traces for Cloudflare Workers
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
—
microsoft/RTVS
R Tools for Visual Studio.
MITJul 20, 2026 · metrics 2.10.0
Packagist
php-fig/http-message-util
No repository description published.
MITAug 27, 2026 · metrics 2.10.0
Go
HumanSecurity/marshmallow
Marshmallow provides a flexible and performant JSON unmarshalling in Go. It specializes in dealing with unstructured struct - when some fields are known and some aren't, with zero performance overhead nor extra coding needed.
MITAug 29, 2026 · metrics 2.10.0
PyPI
Lightning-Universe/stable-diffusion-deploy
Learn to serve Stable Diffusion models on cloud infrastructure at scale. This Lightning App shows load-balancing, orchestrating, pre-provisioning, dynamic batching, GPU-inference, micro-services working together via the Lightning Apps framework.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
hMatoba/Piexif
Exif manipulation with pure python script.
MITAug 27, 2026 · metrics 2.10.0
PyPI
kyamagu/faiss-wheels
Community-maintained faiss wheel builder
MITJul 18, 2026 · metrics 2.10.0
—
JuliaGPU/CUDAnative.jl
Julia support for native CUDA programming
Custom licenseJul 19, 2026 · metrics 2.10.0