Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,811
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
cpuguy83/go-md2man
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
RubyGems
jekyll/jekyll-gist
:page_with_curl: Liquid tag for displaying GitHub Gists in Jekyll sites.
MITSep 10, 2026 · metrics 2.10.0
—
lancaster-university/microbit-dal
No repository description published.
Custom licenseSep 13, 2026 · metrics 2.10.0
—
mwitkow/go-conntrack
Go middleware for net.Conn tracking (Prometheus/trace)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
MetaMask/providers
An Ethereum Provider that connects over a stream, as injected into websites by MetaMask
MITSep 20, 2026 · metrics 2.10.0
Packagist · npm
dmitrybubyakin/nova-medialibrary-field
Laravel Nova field for managing the Spatie media library
MITSep 14, 2026 · metrics 2.10.0
PyPI
vsergeev/u-msgpack-python
A portable, lightweight MessagePack serializer and deserializer written in pure Python, compatible with Python 2, Python 3, CPython, PyPy / msgpack.org[Python]
MITSep 12, 2026 · metrics 2.10.0
—
BioJulia/Bio.jl
[DEPRECATED] Bioinformatics and Computational Biology Infrastructure for Julia
MITOct 18, 2026 · metrics 2.10.0
—
MrCMS/MrCMS
Mr CMS is an open source C# MVC CMS Framework
No licenseSep 20, 2026 · metrics 2.10.0
npm
stellar-deprecated/stellard
INACTIVE. Server in the Stellar network. Maintains the distributed ledger. Introduces and validates transactions. This repo is not in active development, it is being replaced by stellar-core.
Custom licenseSep 25, 2026 · metrics 2.10.0
npm
tomchentw/unused-files-webpack-plugin
Glob all files that are not compiled by webpack under webpack's context
MITOct 18, 2026 · metrics 2.10.0
PyPI
matrix-org/matrix-python-sdk
Matrix Client-Server SDK for Python 2 and 3
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
spf13/jwalterweatherman
So you always leave a note
MITSep 14, 2026 · metrics 2.10.0
NuGet
CommunityToolkit/ColorCode-Universal
This is a port of ColorCode to .NET Standard. The original Html only formatter has been separated from the Logic, so now it can produce Syntax Highlighted code for any output. This Project can currently produce HTML, and Render to UWP RichTextBlocks.
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
HMS-Core/hms-react-native-plugin
This repo contains all of React-Native HMS plugins.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
bigdata-ustc/EduKTM
The Model Zoo of Knowledge Tracing Models
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
ember-template-lint/ember-template-lint
Linter for Ember or Handlebars templates
MITSep 30, 2026 · metrics 2.10.0
PyPI
emmetio/sublime-text-plugin
The essential toolkit for web-developers
MITSep 15, 2026 · metrics 2.10.0
crates.io
input-output-hk/rust-byron-cardano
rust client libraries to deal with the current cardano mainnet (byron / cardano-sl)
MITSep 10, 2026 · metrics 2.10.0
npm
jshttp/etag
Create simple HTTP ETags
MITSep 16, 2026 · metrics 2.10.0
PyPI
machow/quartodoc
Generate API documentation with quarto
MITSep 14, 2026 · metrics 2.10.0
PyPI
ARM-software/SCP-firmware
This System Control Processor (SCP) firmware repository is no longer used and has been set to Read-only for archiving purposes. Please refer to the following active repository.
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
Krypton-Suite/Extended-Toolkit
A companion toolkit for the standard toolkit.
MITSep 11, 2026 · metrics 2.10.0
Maven
eclipse-tahu/tahu
Eclipse Tahu addresses the existence of legacy SCADA/DCS/ICS protocols and infrastructures and provides a much-needed definition of how best to apply MQTT into these existing industrial operational environments.
EPL-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
nox/serde_urlencoded
x-www-form-urlencoded meets Serde
Apache-2.0Sep 16, 2026 · metrics 2.10.0
RubyGems
srawlins/allocation_stats
Tooling for tracing object allocations in Ruby 2.1
Custom licenseSep 11, 2026 · metrics 2.10.0
crates.io
polyfloyd/rust-id3
Moved to https://codeberg.org/polyfloyd/rust-id3
MITSep 20, 2026 · metrics 2.10.0
—
timescale/helm-charts
Configuration and Documentation to run TimescaleDB in your Kubernetes cluster
Apache-2.0Sep 13, 2026 · metrics 2.10.0
—
aymerick/douceur
A simple CSS parser and inliner in Go
MITSep 14, 2026 · metrics 2.10.0
RubyGems
banditcpp/bandit
Human-friendly unit testing for C++11
Custom licenseSep 11, 2026 · metrics 2.10.0