Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,998
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
iroco-co/aioimaplib
Python asyncio IMAP4rev1 client library
GPL-3.0Sep 17, 2026 · metrics 2.10.0
Hex
lpil/thoas
A blazing fast JSON parser and generator in pure Erlang.
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI
makew0rld/md2gemini
File converter from Markdown to Gemini.
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
—
nozzle/throttler
No repository description published.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
crates.io
rwf2/multer
An async parser for multipart/form-data content-type in Rust
MITOct 20, 2026 · metrics 2.10.0
Packagist
DaveRandom/LibDNS
DNS implementation in pure PHP
MITOct 24, 2026 · metrics 2.10.0
NuGet
PowerShell/PowerShellStandard
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
npm
d3/d3-timer
An efficient queue for managing thousands of concurrent animations.
ISCOct 21, 2026 · metrics 2.10.0
Packagist
delight-im/PHP-Cookie
Modern cookie management for PHP
MITSep 20, 2026 · metrics 2.10.0
Packagist
mariovalney/laravel-keycloak-web-guard
Simple Keycloak Guard to Laravel Web Routes - https://packagist.org/packages/vizir/laravel-keycloak-web-guard
No licenseSep 12, 2026 · metrics 2.10.0
Go
netdata/go.d.plugin
netdata go.d.plugin
GPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
ofek/userpath
Cross-platform tool for adding locations to the user PATH, no elevated privileges required!
MITSep 12, 2026 · metrics 2.10.0
npm
Bunlong/next-qrcode
React hooks for generating QRCode for your next React apps.
MITSep 13, 2026 · metrics 2.10.0
NuGet
Krusen/BencodeNET
.NET library for encoding/decoding bencode and reading/writing torrent files
UnlicenseSep 12, 2026 · metrics 2.10.0
Maven
download-maven-plugin/download-maven-plugin
These are a few plugins to help maven user to download different files on different protocol in part of maven build.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
endpoints/endpoints
a hypermedia API framework for javascript.
MITSep 18, 2026 · metrics 2.10.0
Go
pavlo-v-chernykh/keystore-go
A Go (golang) implementation of Java KeyStore encoder/decoder
MITAug 28, 2026 · metrics 2.10.0
NuGet
samcragg/sharpkml
SharpKML is an implementation of the Open Geospatial Consortium (OGC) KML 2.2 standard developed in C#, able to read/write both KML files and KMZ files.
MITSep 11, 2026 · metrics 2.10.0
npm
sindresorhus/environment
Check which JavaScript environment your code is running in at runtime: browser, Node.js, Bun, etc
MITSep 16, 2026 · metrics 2.10.0
NuGet
4RTools/4RTools
Autopot, Skill Spammer, Dancer Macro and more
MITSep 17, 2026 · metrics 2.10.0
npm
empirical-run/empirical
Test and evaluate LLMs and model configurations, across all the scenarios that matter for your application
MITOct 22, 2026 · metrics 2.10.0
npm
gkz/optionator
JavaScript option parsing and help generation library
MITSep 16, 2026 · metrics 2.10.0
RubyGems
jmespath/jmespath.rb
Ruby implementation of JMESPath
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
kentcdodds/rtl-css-js
RTL for CSS in JS
MITOct 19, 2026 · metrics 2.10.0
npm
metafizzy/outlayer
:construction_worker: the brains & guts of a layout library
No licenseOct 24, 2026 · metrics 2.10.0
RubyGems
rdp/os
The OS gem allows for some easy telling if you’re on windows or not. OS.windows? as well as some other helper utilities
MITSep 12, 2026 · metrics 2.10.0
Go
sabhiram/go-gitignore
A gitignore parser for go
MITOct 21, 2026 · metrics 2.10.0
Packagist
clue/commander
Finally a sane way to register available commands and arguments and match your command line in PHP
MITSep 13, 2026 · metrics 2.10.0
—
gluster/glusterd2
[DEPRECATED] Glusterd2 is the distributed management framework to be used for GlusterFS.
GPL-2.0Oct 4, 2026 · metrics 2.10.0
Packagist
miloschuman/yii2-highcharts
Highcharts widget for Yii 2 Framework
MITSep 19, 2026 · metrics 2.10.0