Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,745
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
spiral/exceptions
[READ ONLY] Universal Exception Handler: console, web exception handlers, code highlights, snapshotting support. Subtree split of the Spiral Exceptions component (see spiral/framework)
MITAug 5, 2026 · metrics 2.10.0
Packagist
spiral/reactor
[READ ONLY] Code Scaffolding using declarative OOP wrappers. Subtree split of the Spiral Reactor component (see spiral/framework)
MITAug 22, 2026 · metrics 2.10.0
Packagist
spiral/validator
The component provides an array-based DSL to construct complex validation chains.
MITAug 14, 2026 · metrics 2.10.0
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITAug 4, 2026 · metrics 2.10.0
RubyGems
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
MITAug 21, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Aug 11, 2026 · metrics 2.10.0
Maven
1c-syntax/utils
No repository description published.
GPL-3.0Jul 21, 2026 · metrics 2.10.0
crates.io
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
MITAug 23, 2026 · metrics 2.10.0
Packagist
Automattic/sqlite-database-integration
A fork of https://github.com/WordPress/sqlite-database-integration/.
GPL-2.0Jul 25, 2026 · metrics 2.10.0
Go
AzureAD/microsoft-authentication-extensions-for-go
Secure cross-platform token cache for MSAL public client apps
MITJul 27, 2026 · metrics 2.10.0
Go
Bedrock-OSS/go-burrito
No repository description published.
MITAug 1, 2026 · metrics 2.10.0
—
Consensys/go-ethereum
Official golang implementation of the Ethereum protocol
LGPL-3.0Aug 3, 2026 · metrics 2.10.0
RubyGems · crates.io
DataDog/libddprof
libddprof has been renamed to libdatadog and development has moved to https://github.com/datadog/libdatadog
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Go
DataDog/viper
Go configuration with fangs
MITAug 1, 2026 · metrics 2.10.0
Go
Erda-project/Erda-proto-go
Generated code for Erda protobuf data modals and protocols.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
Ethan-Arrowood/undici
An HTTP/1.1 client, written from scratch for Node.js
MITJul 25, 2026 · metrics 2.10.0
Go
Exeteres/wg-feed
wg-feed is a draft protocol and reference implementation for distributing WireGuard tunnel configurations via subscription URLs
MITJul 21, 2026 · metrics 2.10.0
npm
HubSpotWebTeam/wt-eslint-browser
This is a list of ESLint rules that are recommended for use with Hubspot Marketing WebTeam projects.
No licenseSep 3, 2026 · metrics 2.10.0
—
Itskillmaster/spluspy
High-performance Python Self-Bot Framework for Soroush Plus
MITJul 16, 2026 · metrics 2.10.0
Go
K-Phoen/sdk
Library for using Grafana' structures in Go programs and client for Grafana REST API.
Apache-2.0Aug 20, 2026 · metrics 2.10.0
—
Polpetta/SecurityAndRiskManagementNotes
Notes about 'Security and Risk management' course in Italian
No licenseAug 4, 2026 · metrics 2.10.0
Go · npm
Polymarket/s3x
s3x is a fork of minio providing an S3 API powered by TemporalX that uses IPFS as the data storage layer. It lets you turn any S3 application into an IPFS application with no change in application design
Apache-2.0Sep 8, 2026 · metrics 2.10.0
Packagist
PrestaShopCorp/module-lib-mbo-installer
A helper to ease the download and unzip of modules from the Addons Marketplace
OSL-3.0Jul 29, 2026 · metrics 2.10.0
crates.io
RumovZ/android-tzdata
Parser for the Android-specific tzdata file
Apache-2.0Aug 13, 2026 · metrics 2.10.0
NuGet
WildGums/Orc.Automation
No repository description published.
Custom licenseAug 21, 2026 · metrics 2.10.0
NuGet
WildGums/Orc.CsvTextEditor
Text editor component for CSV files
Custom licenseAug 21, 2026 · metrics 2.10.0
Go
abolfazlalz/herald
Herald is a lightweight, secure peer-to-peer (P2P) messaging library for Go.
MITJul 25, 2026 · metrics 2.10.0
npm
ahmed-dinar/codeforces-api-node
Codeforces API Client Library for Node.js
MITAug 26, 2026 · metrics 2.10.0