Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,022
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
d5h-foss/grpc-interceptor
Simplified Python gRPC interceptors
MITOct 23, 2026 · metrics 2.10.0
npm
egoist/joycon
Find and load config files with joy.
MITSep 15, 2026 · metrics 2.10.0
PyPI
elemental-lf/benji
Benji Backup: A block based deduplicating backup software for Ceph RBD images, iSCSI targets, image files and block devices
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
fitzgen/glob-to-regexp
Convert a glob to a regular expression
No licenseSep 16, 2026 · metrics 2.10.0
Packagist · npm
spiritix/php-chrome-html2pdf
A PHP library for converting HTML to PDF using Google Chrome
MITSep 14, 2026 · metrics 2.10.0
Go
srwiley/rasterx
Rasterx is an SVG 2.0 path compliant rasterizer that can use either scany, the golang vector or a derivative of the freetype anti-aliaser.
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
PyPI
JinyuanSun/PymolFold
Protein folding in Pymol
MITSep 10, 2026 · metrics 2.10.0
PyPI
google/python_portpicker
A module to find available network ports for testing.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs-click
An MkDocs extension to generate documentation for Click command line applications
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
mother/react-files
A file input (dropzone) management component for React
MITOct 18, 2026 · metrics 2.10.0
NuGet
serilog-contrib/Serilog.Enrichers.Sensitive
A Serilog LogEvent enricher that masks sensitive data
MITSep 11, 2026 · metrics 2.10.0
RubyGems
svoop/autotest-growl
Next generation Growl support for autotest.
MITSep 12, 2026 · metrics 2.10.0
crates.io
thomcc/arcstr
Better reference counted strings for Rust
Apache-2.0Sep 25, 2026 · metrics 2.10.0
Packagist · npm
valu-digital/wp-graphql-polylang
WPGraphQL Polylang Extension for WordPress
GPL-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
siebertm/parse-cron
parses cron expressions and calculates the next occurence after a given date
MITSep 11, 2026 · metrics 2.10.0
npm
sindresorhus/untildify
Convert a tilde path to an absolute path: ~/dev => /Users/sindresorhus/dev
MITSep 15, 2026 · metrics 2.10.0
Packagist
wamania/php-stemmer
Native PHP Stemmer
MITSep 18, 2026 · metrics 2.10.0
PyPI
DeepRank/deeprank
This repository has been integrated in https://github.com/DeepRank/deeprank2
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
elliotchance/phpserialize
📑 PHP serialize() and unserialize() for Go
MITSep 23, 2026 · metrics 2.10.0
npm
mathisonian/command-exists
node module to check if a command-line command exists
MITSep 23, 2026 · metrics 2.10.0
Packagist
tddwizard/magento2-fixtures
Fixture library for Magento 2 integration tests by @schmengler (@integer-net)
MITOct 22, 2026 · metrics 2.10.0
npm
mongodb-js/mongodb-schema
Infer a probabilistic schema for a MongoDB collection.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
svenkreiss/socialforce
Differentiable Social Force simulation with universal interaction potentials.
MITOct 21, 2026 · metrics 2.10.0
Maven
ww20081120/framework
java企业级底层框架，提供日志、缓存、DB访问、消息中间件、规则引擎、流程引擎、分布式事务便捷使用方法， 我们不重复造轮子，我们只是开源世界的搬运工。
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
Quantco/polarify
Simplifying conditional Polars Expressions with Python 🐍 🐻❄️
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
ansu5555/pdf-viewer-reactjs
A simple PDF viewer for React js
MITSep 9, 2026 · metrics 2.10.0
npm
felixge/node-combined-stream
A stream that emits multiple other streams one after another.
MITSep 16, 2026 · metrics 2.10.0
npm
karthikuj/sasori
Sasori is a dynamic web crawler powered by Puppeteer, designed for lightning-fast endpoint discovery.
MITSep 16, 2026 · metrics 2.10.0
PyPI
matham/ffpyplayer
A cython implementation of an ffmpeg based player.
LGPL-3.0Sep 14, 2026 · metrics 2.10.0
npm
mcollina/on-exit-leak-free
Execute a function on exit without leaking memory, allowing all objects to be garbage collected
MITSep 23, 2026 · metrics 2.10.0