Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,777
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
abersheeran/a2wsgi
Convert WSGI app to ASGI app or ASGI app to WSGI app.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
zertosh/loose-envify
Like envify but much faster
MITAug 4, 2026 · metrics 2.10.0
npm
then/is-promise
Test whether an object looks like a promises-a+ promise
MITAug 4, 2026 · metrics 2.10.0
NuGet
CatLib/Framework
deprecated, use : https://github.com/CatLib/CatLib
MITJul 27, 2026 · metrics 2.10.0
crates.io
SergioBenitez/yansi
A dead simple ANSI terminal color painting library for Rust.
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Go
mitchellh/colorstring
Go (golang) library for colorizing strings for terminal output.
MITAug 29, 2026 · metrics 2.10.0
Go
mitchellh/reflectwalk
reflectwalk is a Go library for "walking" complex structures, similar to walking a filesystem.
MITJul 28, 2026 · metrics 2.10.0
RubyGems
Azure/azure-sdk-for-ruby
Ruby SDK for Azure Resource Manager: build and manage your Azure cloud infrastructure (Compute, Virtual Networks, Storage, etc...) using Ruby.
MITJul 20, 2026 · metrics 2.10.0
PyPI
a-r-j/ProteinWorkshop
Benchmarking framework for protein representation learning. Includes a large number of pre-training and downstream task datasets, models and training/task utilities. (ICLR 2024)
MITSep 8, 2026 · metrics 2.10.0
PyPI
pycroscopy/pycroscopy
Scientific analysis of nanoscale materials imaging data
MITJul 24, 2026 · metrics 2.10.0
Packagist
amphp/parallel-functions
Simplified parallel processing for PHP based on Amp.
MITAug 13, 2026 · metrics 2.10.0
npm
luniehq/lunie
Lunie is staking, simplified ✨
Apache-2.0Aug 16, 2026 · metrics 2.10.0
Maven
gitskarios/GithubAndroidSdk
[DEPRECATED] Android SDK for Github API
MITJul 27, 2026 · metrics 2.10.0
PyPI
grantjenks/py-tree-sitter-languages
Binary Python wheels for all tree sitter languages.
Custom licenseAug 11, 2026 · metrics 2.10.0
PyPI
finalduty/cis-benchmarks-audit
Simple command line tool to check for compliance against CIS Benchmarks
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
florimondmanca/asgi-lifespan
Programmatic startup/shutdown of ASGI apps.
MITAug 27, 2026 · metrics 2.10.0
npm
sindresorhus/yn
Parse yes/no like values
MITAug 29, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-java
Java grammar for tree-sitter
MITAug 27, 2026 · metrics 2.10.0
RubyGems
defunkt/colored
Colors in your terminal. Unmaintained.
MITJul 22, 2026 · metrics 2.10.0
Go
cpuguy83/go-md2man
No repository description published.
MITJul 28, 2026 · metrics 2.10.0
Packagist · npm
dmitrybubyakin/nova-medialibrary-field
Laravel Nova field for managing the Spatie media library
MITJul 29, 2026 · metrics 2.10.0
—
lancaster-university/microbit-dal
No repository description published.
Custom licenseJul 26, 2026 · metrics 2.10.0
—
mwitkow/go-conntrack
Go middleware for net.Conn tracking (Prometheus/trace)
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
wowserhq/wowser
World of Warcraft in the browser using JavaScript and WebGL
MITJul 31, 2026 · metrics 2.10.0
Go
spf13/jwalterweatherman
So you always leave a note
MITJul 30, 2026 · metrics 2.10.0
crates.io
input-output-hk/rust-cardano
rust client libraries to deal with the current cardano mainnet (byron / cardano-sl)
MITJul 18, 2026 · metrics 2.10.0
npm
jshttp/etag
Create simple HTTP ETags
MITAug 4, 2026 · metrics 2.10.0
PyPI
matrix-org/matrix-python-sdk
Matrix Client-Server SDK for Python 2 and 3
Apache-2.0Jul 31, 2026 · metrics 2.10.0
PyPI
ARM-software/SCP-firmware
This System Control Processor (SCP) firmware repository is no longer used and has been set to Read-only for archiving purposes. Please refer to the following active repository.
Custom licenseJul 22, 2026 · metrics 2.10.0
crates.io
KokaKiwi/rust-hex
A basic crate to encode values to hexadecimal representation. Originally extracted from rustc-serialize.
Apache-2.0Aug 3, 2026 · metrics 2.10.0