Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,768
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
pkgjs/parseargs
Polyfill of `util.parseArgs()`
MITAug 4, 2026 · metrics 2.10.0
RubyGems
ahoward/systemu
univeral capture of stdout and stderr and handling of child process pid for windows, *nix, etc.
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
estools/esutils
utility box for ECMAScript language tools
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
PyPI
kyrus/python-junit-xml
A Python module for creating JUnit XML test result documents that can be read by tools such as Jenkins. If you are ever working with test tool or test suite written in Python and want to take advantage of Jenkins' pretty graphs and test reporting capabilities, this module will let you generate the XML test reports.
MITAug 27, 2026 · metrics 2.10.0
PyPI
JDongian/python-jamo
Hangul syllable decomposition and synthesis using jamo.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Maven
bannedbook/ssvpn
No repository description published.
GPL-3.0Aug 1, 2026 · metrics 2.10.0
PyPI
mike-oakley/openapi-pydantic
Modern, type-safe OpenAPI schemas in Python using Pydantic 1.8+ and 2.x
Custom licenseAug 4, 2026 · metrics 2.10.0
—
AntelopeIO/leap
C++ implementation of the Antelope protocol
Custom licenseSep 5, 2026 · metrics 2.10.0
PyPI
JBKahn/flake8-print
flake8
MITJul 30, 2026 · metrics 2.10.0
Maven
KevinStern/software-and-algorithms
Neat algorithm implementations in Java.
MITAug 22, 2026 · metrics 2.10.0
crates.io
droundy/internment
Interning of data in rust
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
feross/ieee754
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object.
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
octokit/auth-token.js
GitHub API token authentication for browsers and Node.js
MITAug 4, 2026 · metrics 2.10.0
Packagist
pmmp/BedrockData
Blobs of data generated from Minecraft: Bedrock Edition used by PocketMine-MP
CC0-1.0Aug 23, 2026 · metrics 2.10.0
PyPI
Noctem/Monocle
PoGo mapper and notifier
MITAug 1, 2026 · metrics 2.10.0
—
googleapis/python-bigquery-storage
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-bigquery-storage
Apache-2.0Jul 29, 2026 · metrics 2.10.0
PyPI · npm
schettino72/sphinx_press_theme
A Sphinx-doc theme based on Vuepress
Custom licenseAug 29, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-assert-plus
Extra assertions on top of node's assert module
MITAug 31, 2026 · metrics 2.10.0
PyPI
apple/ccs-pykerberos
Python Kerberos library used by CalendarServer
Apache-2.0Aug 19, 2026 · metrics 2.10.0
NuGet
madeyoga/AuthEndpoints
A simple jwt library for aspnetcore that provides a set of minimal api endpoints to handle authentication actions
MITJul 24, 2026 · metrics 2.10.0
crates.io
sebastienrousseau/serde_yml
[DEPRECATED] Final release is a thin compatibility shim. RUSTSEC-2025-0068 structurally fixed in 0.0.13. Migrate to a maintained alternative — see MIGRATION.md.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
crates.io
google/json5format
JSON5 (a.k.a., "JSON for Humans") formatter that preserves contextual comments
BSD-3-ClauseAug 17, 2026 · metrics 2.10.0
npm
sindresorhus/is-interactive
Check if stdout or stderr is interactive
MITAug 4, 2026 · metrics 2.10.0
Go
xhit/go-str2duration
Convert string to duration in golang
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Go
grafana-cold-storage/xk6-disruptor
Extension for injecting faults into k6 tests
AGPL-3.0Jul 19, 2026 · metrics 2.10.0
npm
request/tunnel-agent
HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
Vectorized/soledge
Solidity snippets too edgy to be in Solady
MITJul 26, 2026 · metrics 2.10.0
PyPI
alvinlindstam/grapheme
A python package for grapheme aware string handling
MITAug 19, 2026 · metrics 2.10.0
Maven
mhshams/jnbis
NIST Biometric Image Software (Java Implementation)
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
neondatabase/neonctl
Neon CLI tool. The Neon CLI is a command-line interface that lets you manage Neon Serverless Postgres directly from the terminal.
Apache-2.0Jul 24, 2026 · metrics 2.10.0