Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,859
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
d3/d3-transition
Animated transitions for D3 selections.
ISCSep 16, 2026 · metrics 2.10.0
Packagist
dflydev/dflydev-fig-cookies
Cookies for PSR-7 HTTP Message Interface.
MITSep 14, 2026 · metrics 2.10.0
RubyGems
prawnpdf/prawn-table
Provides support for tables in Prawn
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
unstoppabledomains/resolution
A library to resolve blockchain domain names.
MITSep 14, 2026 · metrics 2.10.0
—
JuliaGraphics/Colors.jl
Color manipulation utilities for Julia
Custom licenseSep 17, 2026 · metrics 2.10.0
—
devplayer0/cvos
Bootable PDF CV
GPL-3.0Sep 17, 2026 · metrics 2.10.0
crates.io
endorlabs/MIRAI
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
PyPI
fatiando/fatiando
DEPRECATED in favor of our newer libraries (see www.fatiando.org). Python toolkit for modeling and inversion in geophysics.
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
NuGet
paiden/Nett
.Net library for TOML
MITSep 11, 2026 · metrics 2.10.0
NuGet
AArnott/PCLCrypto
Platform crypto for portable libraries
MS-PLSep 11, 2026 · metrics 2.10.0
Packagist
CodeDredd/laravel-soap
Laravel Soap Client
MITSep 13, 2026 · metrics 2.10.0
PyPI
edwardgeorge/virtualenv-clone
A script for cloning a non-relocatable virtualenv. originated here: https://gist.github.com/860822
Custom licenseSep 14, 2026 · metrics 2.10.0
Packagist · npm
felixfbecker/php-language-server-protocol
Protocol classes for the Language Server Protocol in PHP
ISCSep 13, 2026 · metrics 2.10.0
npm
here-be/snapdragon
snapdragon is an extremely pluggable, powerful and easy-to-use parser-renderer factory.
MITSep 15, 2026 · metrics 2.10.0
crates.io
nickel-org/rust-mustache
mustache template library for rust
Custom licenseSep 19, 2026 · metrics 2.10.0
RubyGems
pages-themes/leap-day
Leap day is a Jekyll theme for GitHub Pages
CC0-1.0Sep 10, 2026 · metrics 2.10.0
Go
PuerkitoBio/rehttp
Package rehttp implements a Go HTTP transport that handles retries.
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
Pylons/hupper
in-process file monitor / reloader for reloading your code automatically during development
MITSep 12, 2026 · metrics 2.10.0
PyPI
altdesktop/python-dbus-next
🚌 The next great DBus library for Python with asyncio support
MITSep 12, 2026 · metrics 2.10.0
npm
jsverse/transloco-keys-manager
🦄 The Key to a Better Translation Experience
MITSep 16, 2026 · metrics 2.10.0
—
paulirish/html5-boilerplate
THIS REPO HAS MOVED! It has a pretty new home at github.com/h5bp ╰☆╮Please click this link below.
No licenseSep 13, 2026 · metrics 2.10.0
Maven · npm
revapi/revapi
Revapi is an API analysis and change tracking tool written in Java. Its focus is mainly on Java language itself but it has been specifically designed to not be limited to just Java. API is much more than just java classes - also various configuration files, schemas, etc. can contribute to it and users can become reliant on them.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
szmarczak/cacheable-lookup
A cacheable dns.lookup(…) that respects TTL :tada:
MITOct 21, 2026 · metrics 2.10.0
—
timvideos/litex-buildenv
An environment for building LiteX based FPGA designs. Makes it easy to get everything you need!
BSD-2-ClauseSep 11, 2026 · metrics 2.10.0
PyPI
AXErunners/electrum-axe
lightweight client for AXE network
MITSep 13, 2026 · metrics 2.10.0
Go · npm
OpenSLO/oslo
CLI tool for the OpenSLO spec
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
Rich-Harris/vlq
Generate, and decode, base64 VLQ mappings for sourcemaps and other uses
MITSep 23, 2026 · metrics 2.10.0
crates.io
SergioBenitez/state
A Rust library for safe and effortless global and thread-local state management.
Custom licenseSep 10, 2026 · metrics 2.10.0
—
mapbox/eternal
A C++14 compile-time/constexpr map and hash map with minimal binary footprint
ISCOct 20, 2026 · metrics 2.10.0
PyPI
plizonczyk/noiseprotocol
Noise Protocol Framework - Python 3 implementation
MITOct 20, 2026 · metrics 2.10.0