Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,826
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
xolstice/protobuf-maven-plugin
Maven Plugin that executes the Protocol Buffers (protoc) compiler
Custom licenseSep 14, 2026 · metrics 2.10.0
crates.io
citronneur/rdp-rs
Remote Desktop Protocol in RUST
MITOct 2, 2026 · metrics 2.10.0
npm
mafintosh/pumpify
Combine an array of streams into a single duplex stream using pump and duplexify
MITSep 23, 2026 · metrics 2.10.0
Maven
philburk/jsyn
Modular audio synthesizer library with unit generators in Java
Apache-2.0Sep 13, 2026 · metrics 2.10.0
RubyGems
rails/dartsass-rails
Integrate Dart Sass with the asset pipeline in Rails
MITSep 12, 2026 · metrics 2.10.0
RubyGems
ConnorAtherton/rb-readline
Pure-Ruby Readline Implementation
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist · npm
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
No licenseSep 13, 2026 · metrics 2.10.0
npm
ganesshkumar/obsidian-table-editor
An Obsidian plugin to provide an editor for Markdown tables. It can open CSV data and data from Microsoft Excel, Google Sheets, Apple Numbers and LibreOffice Calc as Markdown tables from Obsidian Markdown editor.
MITOct 20, 2026 · metrics 2.10.0
npm
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
MITSep 16, 2026 · metrics 2.10.0
npm
sindresorhus/load-json-file
Read and parse a JSON file
MITSep 16, 2026 · metrics 2.10.0
npm
szmarczak/http2-wrapper
Use HTTP/2 the same way like HTTP/1
MITOct 21, 2026 · metrics 2.10.0
PyPI
bxparks/bigquery-schema-generator
Generates the BigQuery schema from newline-delimited JSON or CSV data records.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
blue-oil/blueoil
Bring Deep Learning to small devices
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
godot-extended-libraries/godot-lod
Level of detail (LOD) add-on for Godot 3.x (GLES3 and GLES2)
MITSep 11, 2026 · metrics 2.10.0
Hex
joedevivo/chatterbox
HTTP/2 Server for Erlang. Boy, that guy was a real chatterbox waddn't he? I didn't think he was ever going to stop with the story.
MITSep 12, 2026 · metrics 2.10.0
crates.io · npm · PyPI
software-mansion/protostar
Protostar is a toolchain for developing and testing Starknet contracts
MITSep 11, 2026 · metrics 2.10.0
PyPI
coletdjnz/yt-dlp-youtube-oauth2
[OBSOLETE] Plugin that adds OAuth2 login support to yt-dlp's YouTube extractors
UnlicenseSep 14, 2026 · metrics 2.10.0
npm
kvandake/lexorank-ts
A reference implementation of a list ordering system like JIRA's Lexorank algorithm
No licenseOct 17, 2026 · metrics 2.10.0
npm
rvagg/node-errno
libuv errno details exposed
No licenseSep 15, 2026 · metrics 2.10.0
npm
adaltas/node-hbase
Asynchronous HBase client for NodeJs using REST
MITSep 20, 2026 · metrics 2.10.0
PyPI
rr-/screeninfo
Fetch location and size of physical screens.
Custom licenseOct 20, 2026 · metrics 2.10.0
—
0xPolygon/zkevm-prover
zkEVM prover in C++
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
blockdiag/blockdiag
No repository description published.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
konnco/filament-import
why import must use a template when you can import all files dynamically?
MITSep 13, 2026 · metrics 2.10.0
npm · PyPI
GoogleCloudPlatform/emblem
Archived: Emblem Giving is a sample application that demonstrates a serverless architecture with continuous delivery, and trouble recovery. :diamond_shape_with_a_dot_inside:
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
d3fvxl/di
🛠 A full-featured dependency injection container for go programming language.
MITSep 13, 2026 · metrics 2.10.0
PyPI
exoplanet-dev/exoplanet
Fast & scalable MCMC for all your exoplanet needs!
MITOct 22, 2026 · metrics 2.10.0
Packagist
aplus-framework/cli
Aplus Framework CLI Library
MITOct 19, 2026 · metrics 2.10.0
RubyGems
devise-passwordless/devise-passwordless
Devise passwordless logins using emailed magic links
MITSep 12, 2026 · metrics 2.10.0
PyPI
svenevs/exhale
Automatic C++ library api documentation generation: breathe doxygen in and exhale it out.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0