Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,178
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
davidbonnet/astring
🌳 Tiny and fast JavaScript code generator from an ESTree-compliant AST.
MITSep 17, 2026 · metrics 2.10.0
Packagist
container-interop/container-interop
Containers interoperability
MITSep 18, 2026 · metrics 2.10.0
npm
google-gemini/deprecated-generative-ai-js
This SDK is now deprecated, use the new unified Google GenAI SDK.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
binance/binance-futures-connector-python
Simple python connector to Binance Futures API
MITSep 20, 2026 · metrics 2.10.0
PyPI
Polymarket/py-clob-client
Python client for the Polymarket CLOB
MITSep 17, 2026 · metrics 2.10.0
npm
zertosh/invariant
invariant
MITSep 17, 2026 · metrics 2.10.0
Go
kudobuilder/kudo
Kubernetes Universal Declarative Operator (KUDO)
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
MITSep 17, 2026 · metrics 2.10.0
PyPI
arundo/adtk
A Python toolkit for rule-based/unsupervised anomaly detection in time series
MPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
MITSep 17, 2026 · metrics 2.10.0
PyPI
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-verror
Rich JavaScript errors
MITSep 17, 2026 · metrics 2.10.0
npm
SukkaW/nolyfill
Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
MITSep 17, 2026 · metrics 2.10.0
npm
pmndrs/its-fine
🐶🔥 A collection of escape hatches for React.
MITSep 17, 2026 · metrics 2.10.0
npm
marnusw/date-fns-tz
Complementary library for date-fns v2 adding IANA time zone support
MITSep 17, 2026 · metrics 2.10.0
PyPI
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
No licenseSep 17, 2026 · metrics 2.10.0
npm
developit/web-worker
Consistent Web Workers in browser and Node.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
rocicorp/replicache
Realtime Sync for Any Backend Stack
No licenseSep 20, 2026 · metrics 2.10.0
Go
Code-Hex/pget
The fastest, resumable file download client
MITSep 20, 2026 · metrics 2.10.0
npm
lukeed/sirv
An optimized middleware & CLI application for serving static files~!
MITSep 17, 2026 · metrics 2.10.0
npm
moxystudio/node-cross-spawn
A cross platform solution to node's spawn and spawnSync
MITSep 16, 2026 · metrics 2.10.0
PyPI
GaParmar/clean-fid
PyTorch - FID calculation with proper image resizing and quantization steps [CVPR 2022]
MITSep 17, 2026 · metrics 2.10.0
PyPI
iver56/torch-audiomentations
Fast audio data augmentation in PyTorch. Inspired by audiomentations. Useful for deep learning.
MITSep 17, 2026 · metrics 2.10.0
npm
geraintluff/tv4
Tiny Validator for JSON Schema v4
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
kbandla/dpkt
fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
MITSep 17, 2026 · metrics 2.10.0
Go
solod-dev/solod
A subset of Go that translates to C
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
PyPI
jsocol/django-ratelimit
Cache-based rate-limiting for Django
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
nikic/iter
Iteration primitives using generators
Custom licenseSep 18, 2026 · metrics 2.10.0