Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,059
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
hupe1980/react-script-hook
React hook to dynamically load an external script and know when its loaded
MITSep 20, 2026 · metrics 2.10.0
—
Macross-Software/core
Core repository contains the primary open source libraries released by Macross Software for .NET Core.
MITSep 16, 2026 · metrics 2.10.0
PyPI
NordicSemiconductor/pc-ble-driver-py
Python bindings for the ble-driver library
Custom licenseSep 15, 2026 · metrics 2.10.0
—
PacificBiosciences/ccs
CCS: Generate Highly Accurate Single-Molecule Consensus Reads (HiFi Reads)
BSD-3-Clause-ClearSep 13, 2026 · metrics 2.10.0
npm
d3/d3-chord
Visualizations relationships or network flow with a circular layout.
ISCSep 16, 2026 · metrics 2.10.0
Hex
fogfish/datum
pure functional and generic programming for Erlang
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
iarna/in-publish
Detect if we were run as a result of `npm publish`.
ISCOct 18, 2026 · metrics 2.10.0
Packagist
jordanbrauer/unit-converter
Convert standard units from one to another with this easy to use, lightweight package
MITOct 1, 2026 · metrics 2.10.0
crates.io
rust-vmm/seccompiler
This is a public archive. The code now lives in the mono-repo: https://github.com/rust-vmm/rust-vmm/
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
MetaMask/browser-passworder
A simple browserifiable module for encrypting and decrypting JSON-serializable objects with a password.
ISCSep 28, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-sort-class-members
An ESLint rule for enforcing consistent ES6 class member order
No licenseOct 24, 2026 · metrics 2.10.0
crates.io
datenlord/s3-server
Generic S3 server implementation
MITOct 20, 2026 · metrics 2.10.0
PyPI
sendgrid/python-http-client
Twilio SendGrid's Python HTTP Client for calling APIs
MITOct 23, 2026 · metrics 2.10.0
Packagist
webflo/drupal-finder
No repository description published.
GPL-2.0Sep 16, 2026 · metrics 2.10.0
npm
AckerApple/angular-file
Angular components for user file select, drop, and more
MITOct 22, 2026 · metrics 2.10.0
PyPI
autoprotocol/autoprotocol-python
Python library for generating Autoprotocol
Custom licenseOct 14, 2026 · metrics 2.10.0
—
googleapis/python-texttospeech
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-texttospeech
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
janosh/svelte-toc
Sticky responsive table of contents component
MITSep 16, 2026 · metrics 2.10.0
PyPI
miracle2k/python-glob2
Version of the glob module that supports recursion via **, and can capture patterns.
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
npm
pkgjs/parseargs
Polyfill of `util.parseArgs()`
MITSep 16, 2026 · metrics 2.10.0
npm
sindresorhus/function-timeout
Make a synchronous function have a timeout
MITSep 15, 2026 · metrics 2.10.0
npm
prebuild/node-gyp-build
Build tool and bindings loader for node-gyp that supports prebuilds
MITSep 15, 2026 · metrics 2.10.0
npm
theKashey/react-remove-scroll-bar
Remove document scroll bar. Nothing more
MITSep 15, 2026 · metrics 2.10.0
RubyGems
ahoward/systemu
univeral capture of stdout and stderr and handling of child process pid for windows, *nix, etc.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
estools/esutils
utility box for ECMAScript language tools
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
irgeek/StrEnum
A Python Enum that inherits from str.
MITSep 10, 2026 · metrics 2.10.0
PyPI
kyrus/python-junit-xml
A Python module for creating JUnit XML test result documents that can be read by tools such as Jenkins. If you are ever working with test tool or test suite written in Python and want to take advantage of Jenkins' pretty graphs and test reporting capabilities, this module will let you generate the XML test reports.
MITOct 24, 2026 · metrics 2.10.0
PyPI
mike-oakley/openapi-pydantic
Modern, type-safe OpenAPI schemas in Python using Pydantic 1.8+ and 2.x
Custom licenseSep 16, 2026 · metrics 2.10.0
Packagist
modmore/Gitify
Command line toolkit to make managing a MODX site in git a lot easier.
MITSep 19, 2026 · metrics 2.10.0
Hex
revelrylabs/ecto_soft_delete
Soft Deletion for Ecto
MITSep 9, 2026 · metrics 2.10.0