Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,983
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
blendle/zapdriver
Blazing fast, Zap-based Stackdriver logging.
ISCSep 23, 2026 · metrics 2.10.0
npm
mathiask88/node-snap7
node.js wrapper for snap7
MITSep 16, 2026 · metrics 2.10.0
Packagist
medz/id-card-of-china
🆔一个基于「公民身份号码」规则获取身份证号码中包含的基础信息组件（PHP）
MITSep 19, 2026 · metrics 2.10.0
npm
nodeftpd/nodeftpd
FTP Server in Node
MITOct 20, 2026 · metrics 2.10.0
Maven
EsotericSoftware/minlog
Minimal overhead Java logging
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
kevinbeaty/any-promise
NOTE: You probably want native promises now
MITSep 16, 2026 · metrics 2.10.0
npm
microsoft/ai-chat-protocol
A library + API spec for easily streaming generative AI output to your chat applications.
MITSep 12, 2026 · metrics 2.10.0
—
notaryproject/specifications
Cross tooling and interoperability specifications
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
ActiveCampaign/postmark-php
The official PHP library for Postmark.
MITSep 17, 2026 · metrics 2.10.0
PyPI
PyCQA/doc8
Style checker for sphinx (or other) rst documentation.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
VividCortex/gohistogram
Streaming approximate histograms in Go
MITSep 26, 2026 · metrics 2.10.0
PyPI
gweis/isodate
ISO 8601 date/time parser
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
mathiasbynens/cssesc
A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.
MITSep 16, 2026 · metrics 2.10.0
PyPI
s3gw-tech/s3gw
Container able to run on a Kubernetes cluster, providing S3-compatible endpoints to applications.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
—
tracebox/tracebox
Tracebox, a middlebox detection tool
GPL-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
babel/ruby-babel-transpiler
Ruby Babel is a bridge to the JS Babel transpiler.
MITSep 11, 2026 · metrics 2.10.0
RubyGems
dkubb/yardstick
A tool for verifying YARD documentation coverage
MITSep 12, 2026 · metrics 2.10.0
npm
trentm/node-dashdash
A light, featureful and explicit option parsing library for node.js.
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
chtd/psycopg2cffi
Port to cffi with some speed improvements
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
ctidigital/magento2-configurator
Magento 2 Configurator
MITOct 19, 2026 · metrics 2.10.0
Packagist
jawira/case-converter
Convert strings between 13 naming conventions: Snake case, Camel case, Kebab case, Pascal case, Ada case, Train case, Cobol case, Macro case, Upper case, Lower case, Title case, Sentence case and Dot notation.
MITSep 18, 2026 · metrics 2.10.0
NuGet
vb-consulting/Norm.net
Norm.net is an innovative and high-performance Database Access for .NET Standard 2.1 and higher
MITSep 11, 2026 · metrics 2.10.0
npm
MetaMask/rpc-errors
Ethereum RPC Errors
MITSep 28, 2026 · metrics 2.10.0
npm
ProtonMail/proton-calendar
Proton Calendar built with React.
No licenseSep 13, 2026 · metrics 2.10.0
PyPI
google/python-subprocess32
A backport of the Python 3 subprocess module for use on Python 2.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
micromatch/to-regex-range
Pass two numbers, get a regex-compatible source string for matching ranges. Fast compiler, optimized regex, and validated against more than 2.78 million test assertions. Useful for creating regular expressions to validate numbers, ranges, years, etc.
MITSep 16, 2026 · metrics 2.10.0
npm
unshiftio/querystringify
Querystringify - Small, simple but powerful query string parser.
MITOct 21, 2026 · metrics 2.10.0
npm · crates.io
FuelLabs/fuel-bridge
The canonical Fuel bridge mono repo.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
aave/aave-utilities
No repository description published.
MITSep 25, 2026 · metrics 2.10.0
npm
arleyGuoLei/wechat-app-words-pk
微信小程序 云开发 毕业设计「 单词天天斗 」，好友/匹配/人机 对战，单词 本科毕设 typescript 原生微信小程序
Apache-2.0Sep 19, 2026 · metrics 2.10.0