Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,570
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
src-d/proteus
Generate .proto files from Go source code.
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
fluxninja/aperture
Rate limiting, caching, and request prioritization for modern workloads
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
adilmohak/django-lms
A learning management system using django web framework. Course add and drop, grade and assessment result management, online quiz, report generator, student and lecturers management, dashboard, and so much more...
MITSep 19, 2026 · metrics 2.10.0
Go
gorilla/securecookie
Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Go
shurcooL/graphql
Package graphql provides a GraphQL client implementation.
MITSep 23, 2026 · metrics 2.10.0
Go
jonboulle/clockwork
a fake clock for golang
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist
mustangostang/spyc
A simple YAML loader/dumper class for PHP
MITOct 20, 2026 · metrics 2.10.0
RubyGems
hotwired/stimulus-rails
Use Stimulus in your Ruby on Rails app
MITSep 11, 2026 · metrics 2.10.0
Go
rivo/uniseg
Unicode Text Segmentation, Word Wrapping, and String Width Calculation in Go
MITSep 14, 2026 · metrics 2.10.0
Go
vmware-archive/kubecfg
A tool for managing complex enterprise Kubernetes environments as code.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
microsoft/botbuilder-js
Welcome to the Bot Framework SDK for JavaScript repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using JavaScript.
MITAug 27, 2026 · metrics 2.10.0
Packagist
dflydev/dflydev-dot-access-data
Given a deep data structure representing a configuration, access configuration by dot notation.
MITAug 27, 2026 · metrics 2.10.0
Go
chai2010/webp
WebP decoder and encoder for Go (Zero Dependencies). 该项目不再维护, 大家自己fork吧
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
npm
lisaogren/axios-cache-adapter
Caching adapter for axios. Store request results in a configurable store to prevent unneeded network requests.
MITSep 15, 2026 · metrics 2.10.0
PyPI
pltrdy/rouge
A full Python Implementation of the ROUGE Metric (not a wrapper)
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
taskipy/taskipy
the complementary task runner for python
MITSep 14, 2026 · metrics 2.10.0
Hex
gen-smtp/gen_smtp
The extensible Erlang SMTP client and server library.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
mhart/aws4
Signs and prepares Node.js requests using AWS Signature Version 4
MITOct 21, 2026 · metrics 2.10.0
Packagist
niklasravnsborg/laravel-pdf
📄 Laravel PDF
No licenseOct 8, 2026 · metrics 2.10.0
PyPI
gaogaotiantian/objprint
A library that can print Python objects in human readable format
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
scrivo/highlight.php
A port of highlight.js by Ivan Sagalaev to PHP
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
pelotom/use-methods
A simpler way to useReducers
MITSep 19, 2026 · metrics 2.10.0
PyPI
bear/parsedatetime
Parse human-readable date/time strings
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Hex
xerions/phoenix_swagger
Swagger integration to Phoenix framework
MPL-2.0Sep 9, 2026 · metrics 2.10.0
RubyGems
nahi/httpclient
'httpclient' gives something like the functionality of libwww-perl (LWP) in Ruby.
No licenseSep 12, 2026 · metrics 2.10.0
—
riscv-software-src/riscv-pk
RISC-V Proxy Kernel
Custom licenseSep 13, 2026 · metrics 2.10.0
RubyGems
resque/redis-namespace
This gem adds a Redis::Namespace class which can be used to namespace Redis keys.
MITSep 12, 2026 · metrics 2.10.0
Maven
tony-framework/TonY
TonY is a framework to natively run deep learning frameworks on Apache Hadoop.
Custom licenseOct 22, 2026 · metrics 2.10.0
PyPI
pydanny/cached-property
A decorator for caching properties in classes.
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
roy-ht/editdistance
Fast implementation of the edit distance(Levenshtein distance)
MITAug 27, 2026 · metrics 2.10.0