Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,998
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
Codaisseur/terminal-notifier-guard
Mac OS X User Notifications for Guard
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
blokkli/editor
Interactive page editor for Nuxt 3
MITOct 23, 2026 · metrics 2.10.0
—
dash-project/dash
DASH, the C++ Template Library for Distributed Data Structures with Support for Hierarchical Locality for HPC and Data-Driven Science
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
gnosis/gp-v2-contracts
Smart contracts for the Gnosis Protocol v2
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
liuquanhao/moyu
墨鱼探针
No licenseSep 10, 2026 · metrics 2.10.0
npm
microsoft/powerbi-client-angular
Power BI Angular component. This library lets you embed Power BI report, dashboard, dashboard tile, report visual, or Q&A in your Angular application.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
RocketChat/fuselage
React port of Rocket.Chat's design system, Fuselage
MITOct 22, 2026 · metrics 2.10.0
npm
hotforfeature/origami
Angular + Polymer
MITSep 12, 2026 · metrics 2.10.0
npm
AriaMinaei/RenderKid
Stylish console.log for node
MITSep 15, 2026 · metrics 2.10.0
PyPI
PyCQA/flake8-docstrings
Integration of pydocstyle and flake8 for combined linting and reporting
MITOct 24, 2026 · metrics 2.10.0
—
trailofbits/uthenticode
A cross-platform library for verifying Authenticode signatures
MITSep 12, 2026 · metrics 2.10.0
npm
DevExpress/devextreme-react
[MIGRATED] See https://github.com/DevExpress/DevExtreme/tree/HEAD/packages/devextreme-react
MITSep 13, 2026 · metrics 2.10.0
npm
aligay/jsonuri
🌳 阿里剑鱼、iceluna、vanex 数据操作底层库，使用O(n) 复杂度回溯祖先节点
MITSep 18, 2026 · metrics 2.10.0
PyPI
clarketm/mergedeep
A deep merge function for 🐍.
MITOct 23, 2026 · metrics 2.10.0
crates.io
L4z3x/mal-cli
Terminal Interface for the official MyAnimeList api.
MITSep 13, 2026 · metrics 2.10.0
crates.io
danburkert/fs2-rs
Extended utilities for working with files and filesystems in Rust
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
flmnt/graphemer
Unicode character splitter
MITSep 16, 2026 · metrics 2.10.0
npm
inspect-js/object-inspect
string representations of objects in node and the browser
MITSep 16, 2026 · metrics 2.10.0
RubyGems
inukshuk/bibtex-ruby
A BibTeX library, parser, and converter for Ruby.
GPL-3.0Sep 12, 2026 · metrics 2.10.0
PyPI
mbr/tinyrpc
A compact, modular transport and protocol agnostic RPC library. Does jsonrpc v2.
MITSep 12, 2026 · metrics 2.10.0
npm
aurelia/dependency-injection
A lightweight, extensible dependency injection container for JavaScript.
MITOct 19, 2026 · metrics 2.10.0
RubyGems
jekyll/mercenary
An easier way to build your command-line scripts in Ruby.
MITOct 23, 2026 · metrics 2.10.0
Packagist · npm
oneduo/nova-file-manager
The most advanced File Manager for Laravel Nova, feature rich and robust build.
MITSep 14, 2026 · metrics 2.10.0
NuGet
serenity-is/serene
Serenity Application Template
MITSep 13, 2026 · metrics 2.10.0
NuGet
supabase-community/postgrest-csharp
A C# Client library for Postgrest
MITSep 11, 2026 · metrics 2.10.0
RubyGems · npm
testdouble/static-rails
Build & serve static sites (e.g. Jekyll, Hugo) from your Rails app
MITSep 21, 2026 · metrics 2.10.0
npm
atomic-router/atomic-router
Platform-agnostic router that does not break your architecture
MITSep 25, 2026 · metrics 2.10.0
—
googleapis/python-vision
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-vision
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI
ipipdotnet/ipdb-python
IPIP.net officially supported IP database ipdb format parsing library
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
microsoft/lsprotocol
Code generator and generated types for Language Server Protocol.
MITSep 12, 2026 · metrics 2.10.0