Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,090
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
cedar-lang/cedar
A lisp dialect
MITSep 16, 2026 · metrics 2.10.0
Go
frostyard/plow
debian package repository manager, 100% serverless with GH Actions and Pages
No licenseSep 19, 2026 · metrics 2.10.0
Maven
hsu-aut/PLC-Simulation
Simulation of a Fischer-Technik lab plant that can be used to learn PLC programming
No licenseSep 16, 2026 · metrics 2.10.0
npm
imranbarbhuiya/eslint-config-mahir
My opinionated eslint config
MITSep 18, 2026 · metrics 2.10.0
Go
macabu/inamedparam
:writing_hand: A linter that reports interfaces with unnamed method parameters
MITSep 16, 2026 · metrics 2.10.0
crates.io
ncatelli/parcel
A small zero-dependency parser-combinator library for rust.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io · npm
ncatelli/scrap
A minimal command-line utility framework built with zero external dependencies
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Packagist
pear/Structures_Graph
Graph datastructure manipulation library
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go · PyPI
replicate/cog-runtime
Cog runtime implementation
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
returnearly/laravel-enums
A package to generate PHP 8.1 Enums, and adds Laravel Collection helpers around them.
MITSep 16, 2026 · metrics 2.10.0
crates.io · npm
risingwavelabs/rw-diagnose-tools
Toolset for diagnosing Risingwave clusters.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
tomatophp/console-helpers
tons of helper you need for you artisan command line application
MITSep 16, 2026 · metrics 2.10.0
—
weaveworks/policy-library
The policy-as-code library
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-decimal
Check if a character is decimal
MITSep 16, 2026 · metrics 2.10.0
—
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
MITSep 20, 2026 · metrics 2.10.0
crates.io
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
AndroidPoet/revenuecat-cli
Fast, lightweight, and scriptable CLI for RevenueCat
MITSep 17, 2026 · metrics 2.10.0
Hex
BrandtHill/Salchicha
An Elixir NaCl/libsodium-lite Salsa20/ChaCha20 encryption tool
MITSep 18, 2026 · metrics 2.10.0
—
EngoEngine/math
Fork of luxengine/math which is now moved
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
—
FastReports/winforms-datavisualization
System.Windows.Forms.DataVisualization provides basic charting for WinForms applications.
MITSep 15, 2026 · metrics 2.10.0
—
NDari/gocrunch
High performance numeric library in Go
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
NextPKI/certscan
Auto-discovery agent for TLS certificates. Scans your local IPv4/IPv6 network and static hosts for HTTPS, SMTPS, IMAPS, and more. Reports certificate metadata via Webhook. Supports TLS, STARTTLS, SNI, and protocol tagging. You can't protect what you don't know you have.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
PostHog/posthog-rrweb
a complete copy of rrweb allowing us to vary CI
MITSep 15, 2026 · metrics 2.10.0
—
RTradeLtd/testenv
🚧 configuration for spinning up Temporal test environments
No licenseSep 16, 2026 · metrics 2.10.0
NuGet
Vantiv/cnp-sdk-for-dotnet
.NET SDK to ease XML integrations with the Vantiv eCommerce platform
Custom licenseSep 21, 2026 · metrics 2.10.0
—
arilamstein/choroplethrCaCensusTract
Shapefile, metadata and visualization functions for US Census Tracts in California
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
astroport-fi/terra-plus
Production Quality contracts under open source licenses
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
Packagist
barryvdh/laravel
A PHP Framework For Web Artisans
No licenseSep 19, 2026 · metrics 2.10.0