Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,859
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
reactphp/async
Async utilities and fibers for ReactPHP.
MITSep 14, 2026 · metrics 2.10.0
Go
PaesslerAG/jsonpath
No repository description published.
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
crates.io
hyperium/mime
MIMEs in Rust
MITSep 16, 2026 · metrics 2.10.0
—
lucoiso/UEHttpGPT
HttpGPT is an Unreal Engine plugin that facilitates integration with OpenAI's GPT based services (ChatGPT and DALL-E) through asynchronous REST requests, making it easy for developers to communicate with these services.
MITSep 12, 2026 · metrics 2.10.0
Maven
vmware-archive/vsphere-automation-sdk-java
Java samples, language bindings, and API reference documentation for vSphere, VMC, and NSX-T using the VMware REST API
MITSep 13, 2026 · metrics 2.10.0
Maven
0x4f53/Wristkey
A free and open-source 2FA app for smartwatches.
MITSep 16, 2026 · metrics 2.10.0
—
PaloAltoNetworks/iron-skillet
IronSkillet is a set of day-one configuration templates for PAN-OS to enable alignment with security best practices. See the Quick Start section below to get started using the template configurations.
MITSep 11, 2026 · metrics 2.10.0
PyPI
aio-libs/aiohttp-cors
CORS support for aiohttp
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
imdone/imdone-atom
imdone-atom has been archived
MITSep 16, 2026 · metrics 2.10.0
npm
microflo/microflo
Live dataflow programming for microcontrollers and embedded
MITSep 13, 2026 · metrics 2.10.0
Hex
TheFirstAvenger/ets
:ets, the Elixir way
MITSep 11, 2026 · metrics 2.10.0
Packagist
brazanation/php-documents
Library to provide Brazilian Documents as Value Objects in PHP
No licenseSep 18, 2026 · metrics 2.10.0
RubyGems
mloughran/em-hiredis
Eventmachine redis client
MITSep 12, 2026 · metrics 2.10.0
crates.io
abonander/mime_guess
MIME type guessing of file extensions for Rust.
MITSep 17, 2026 · metrics 2.10.0
npm
aidenlx/table-extended
Extend basic table in Obsidian with MultiMarkdown table syntax
No licenseSep 13, 2026 · metrics 2.10.0
—
broadinstitute/ichorCNA
Estimating tumor fraction in cell-free DNA from ultra-low-pass whole genome sequencing.
GPL-3.0Sep 15, 2026 · metrics 2.10.0
—
dsherret/code-block-writer
Code writer for JavaScript and TypeScript code.
MITSep 23, 2026 · metrics 2.10.0
RubyGems
dtao/safe_yaml
Parse YAML safely
MITSep 10, 2026 · metrics 2.10.0
—
intel-aero/meta-intel-aero
Yocto layer to support Intel Aero platform
GPL-2.0Sep 11, 2026 · metrics 2.10.0
NuGet
jamesmanning/RunProcessAsTask
Simple wrapper around System.Diagnostics.Process to expose it as a System.Threading.Tasks.Task
MITSep 11, 2026 · metrics 2.10.0
—
jupyterhub/helm-chart
A store of Helm chart tarballs for deploying JupyterHub and BinderHub on a Kubernetes cluster
No licenseSep 18, 2026 · metrics 2.10.0
npm
isaacs/yallist
Yet Another Linked List
Custom licenseSep 16, 2026 · metrics 2.10.0
—
ivanseidel/DueTimer
⏳ Timer Library fully implemented for Arduino DUE
MITOct 22, 2026 · metrics 2.10.0
npm
nadavspi/obsidian-relative-line-numbers
No repository description published.
No licenseOct 20, 2026 · metrics 2.10.0
—
tj-actions/verify-changed-files
:octocat: Github action to verify file changes that occur during the workflow execution.
MITSep 20, 2026 · metrics 2.10.0
crates.io
briansmith/untrusted
Safe, fast, zero-panic, zero-crashing, zero-allocation parsing of untrusted inputs in Rust.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
go-chassis/go-archaius
a dynamic configuration framework used in distributed system
Apache-2.0Oct 13, 2026 · metrics 2.10.0
RubyGems
stevegraham/certified
Ensure net/https uses OpenSSL::SSL::VERIFY_PEER to verify SSL certificates and provides certificate bundle in case OpenSSL cannot find one
MITSep 11, 2026 · metrics 2.10.0
PyPI · npm · crates.io +1
tree-sitter/tree-sitter-html
HTML grammar for Tree-sitter
MITOct 24, 2026 · metrics 2.10.0
PyPI
Freeseer/freeseer
Designed for capturing presentations at conferences. Pre-fill a list of talks to record, record them, and upload them to YouTube with our YouTube Uploader.
GPL-3.0Sep 12, 2026 · metrics 2.10.0