Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,757
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
enlightn/security-checker
A PHP dependency vulnerabilities scanner based on the Security Advisories Database.
MITSep 18, 2026 · metrics 2.10.0
Go
jackc/pgtype
No repository description published.
MITSep 23, 2026 · metrics 2.10.0
Go
EngoEngine/ecs
A Go-implementation of the Entity-Component-System paradigm
MITSep 27, 2026 · metrics 2.10.0
PyPI
al45tair/netifaces
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
npm
d3/d3-time-format
Parse and format times, inspired by strptime and strftime.
ISCOct 21, 2026 · metrics 2.10.0
NuGet
dsplaisted/strongnamer
No repository description published.
MITSep 12, 2026 · metrics 2.10.0
Packagist
friends-of-reactphp/mysql
Async MySQL database client for ReactPHP.
MITSep 13, 2026 · metrics 2.10.0
PyPI
rougier/freetype-py
Python binding for the freetype library
Custom licenseSep 12, 2026 · metrics 2.10.0
crates.io
tailhook/quick-error
A rust-macro which makes errors easy to write
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
AaronC81/sord
Convert YARD docs to Sorbet RBI and Ruby 3/Steep RBS files
MITSep 11, 2026 · metrics 2.10.0
PyPI
DiffSK/configobj
Python 3+ compatible port of the configobj library
Custom licenseSep 10, 2026 · metrics 2.10.0
Hex
potatosalad/erlang-jose
JSON Object Signing and Encryption (JOSE) for Erlang and Elixir
MITSep 9, 2026 · metrics 2.10.0
crates.io
webdesus/fs_extra
Expanding opportunities standard library std::fs and std::io
MITSep 17, 2026 · metrics 2.10.0
NuGet
whistyun/MdXaml
Markdown for WPF - alternate version of Markdown.Xaml
MITSep 11, 2026 · metrics 2.10.0
Packagist
lanthaler/JsonLD
JSON-LD processor for PHP
MITOct 20, 2026 · metrics 2.10.0
PyPI
algorithmic-music-exploration/amen
A toolbox for algorithmic remixing, after Echo Nest Remix
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
npm
felixfbecker/cli-highlight
Syntax highlighting for your terminal 💻✨
ISCSep 15, 2026 · metrics 2.10.0
Maven
spring-attic/spring-cloud-stream-binder-kafka
Spring Cloud Stream binders for Apache Kafka and Kafka Streams
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
allenai/openie-standalone
Quality information extraction at web scale. Edit
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
box/viewer.js
A viewer for documents converted with the Box View API
Apache-2.0Sep 9, 2026 · metrics 2.10.0
RubyGems
rails/rails-controller-testing
Brings back `assigns` and `assert_template` to your Rails tests
MITSep 11, 2026 · metrics 2.10.0
npm
scroll-into-view/compute-scroll-into-view
Utility for calculating what should be scrolled, how it's scrolled is up to you
MITSep 23, 2026 · metrics 2.10.0
npm
w3c/browser-specs
A machine-readable list of Web specifications
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
ajafff/tsutils
utility functions for working with typescript's AST
MITOct 21, 2026 · metrics 2.10.0
PyPI
privacy-ethereum/zkevm-specs
No repository description published.
No licenseSep 10, 2026 · metrics 2.10.0
PyPI
vaab/colour
Python color representations manipulation library (RGB, HSL, web, ...)
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
npm
gristlabs/ts-interface-checker
Runtime library to validate data against TypeScript interfaces.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
RubyGems
guard/rb-inotify
A thorough inotify wrapper for Ruby using FFI.
MITSep 12, 2026 · metrics 2.10.0
Hex
karolsluszniak/ex_check
One task to efficiently run all code analysis & testing tools in an Elixir project. Born out of 💜 to Elixir and pragmatism.
MITSep 11, 2026 · metrics 2.10.0
—
kframework/c-semantics
Semantics of C in K
Custom licenseSep 13, 2026 · metrics 2.10.0