Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,273
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
miurahr/ppmd-cffi
ppmd-cffi provides classes and functions for compressing and decompressing text data, using PPM (Prediction by partial matching) compression algorithm variation H and I.2 by CFFI python/C binding.
LGPL-2.1Sep 26, 2026 · metrics 2.10.0
crates.io
ncatelli/parcel
A small zero-dependency parser-combinator library for rust.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io · npm
ncatelli/scrap
A minimal command-line utility framework built with zero external dependencies
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Packagist · npm · RubyGems
neos/media-browser
[READ-ONLY] A media browser UI package for Neos
No licenseOct 23, 2026 · metrics 2.10.0
PyPI
np-guard/netpol-synthesizer
Produces a set of network policies, given a json describing the connectivity in a given cluster
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
nrfconnect/sdk-hal_nordic
NCS downstream of https://github.com/zephyrproject-rtos/hal_nordic
No licenseSep 13, 2026 · metrics 2.10.0
npm
nyaruka/temba-components
General web components for site building
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
operator-framework/oria-operator
No repository description published.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
pear/Structures_Graph
Graph datastructure manipulation library
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
crates.io
phillord/pretty_rdf
No repository description published.
No licenseOct 20, 2026 · metrics 2.10.0
Packagist
pmmp/ErrorHandler
Basic utilities to make nasty PHP E_* errors more usable
LGPL-3.0Sep 13, 2026 · metrics 2.10.0
—
pnpm/components
No repository description published.
MITOct 21, 2026 · metrics 2.10.0
npm
polytope-labs/hyperbridge-sdk
Collection of supporting tools and libraries for hyperbridge developers
MITSep 12, 2026 · metrics 2.10.0
npm
privacy-ethereum/snark-artifacts
A streamlined mechanism for distributing SNARK artifacts.
MITSep 12, 2026 · metrics 2.10.0
PyPI · crates.io
prostomarkeloff/find-dup-defs
Find the copy-pasted code your linter can't — rank it by how worth refactoring it is — and surface the recurring shapes that should become one helper (Python/TS/Rust)
MITOct 14, 2026 · metrics 2.10.0
npm
pshenmic/dash-platform-sdk
A lightweight Javascript Dash Platform SDK
MITSep 12, 2026 · metrics 2.10.0
Go · PyPI
pulumi/pulumi-minio
No repository description published.
Custom licenseOct 23, 2026 · metrics 2.10.0
—
qBraid/community
Where qBraid users discuss, report bugs and submit feature requests.
MITOct 2, 2026 · metrics 2.10.0
Go · PyPI
replicate/cog-runtime
Cog runtime implementation
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
returnearly/laravel-enums
A package to generate PHP 8.1 Enums, and adds Laravel Collection helpers around them.
MITSep 16, 2026 · metrics 2.10.0
PyPI
ripl-org/sirad
SIRAD: Secure Infrastructure for Research with Administrative Data
Custom licenseOct 23, 2026 · metrics 2.10.0
crates.io · npm
risingwavelabs/rw-diagnose-tools
Toolset for diagnosing Risingwave clusters.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
roadrunner-php/app-logger
🔌 Application logger plugin
MITOct 10, 2026 · metrics 2.10.0
npm
rrweb-io/CSSOM
CSS Object Model implemented in pure JavaScript. Also, a CSS parser.
MITSep 15, 2026 · metrics 2.10.0
Go
sean2077/oh-my-agents
Lightweight dual-agent CLI + skills toolkit for Claude Code and Codex workflows.
MITOct 19, 2026 · metrics 2.10.0
PyPI
seip25/Lila
Lila is a minimalist Python framework based on Starlette and Pydantic. Designed for developers seeking simplicity, flexibility, and robustness, it enables efficient and customizable web or API application development. Its modular structure and support for advanced configurations make it suitable for both beginners and experienced developers.
MITOct 20, 2026 · metrics 2.10.0
npm
shipshapecode/ember-3d-folding-panel
An Ember addon for 3d folding panels
MITSep 9, 2026 · metrics 2.10.0
NuGet
skbkontur/edi-api-client
EDI API client
MITSep 14, 2026 · metrics 2.10.0
RubyGems
smartcontractkit/old-chainlink-ruby-docs
Beautiful static documentation for your API
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
socketio/emitter
Event emitter component
MITSep 15, 2026 · metrics 2.10.0