Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
yiisoft/yii2-elasticsearch
Yii 2 Elasticsearch extension
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
—
leahneukirchen/bacon
a small RSpec clone
Custom licenseJul 21, 2026 · metrics 2.10.0
—
yaourdt/mgos-to-tasmota
A minimal firmware for OTA (over the air) flashing Tasmota, HAA, or ESPurna from Mongoose OS or compatible firmware types.
GPL-3.0Aug 1, 2026 · metrics 2.10.0
Packagist
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
MITAug 22, 2026 · metrics 2.10.0
Go
go-playground/universal-translator
:speech_balloon: i18n Translator for Go/Golang using CLDR data + pluralization rules
MITJul 28, 2026 · metrics 2.10.0
PyPI
pycontribs/ansi2html
Convert text with ansi color codes to HTML
LGPL-3.0Aug 19, 2026 · metrics 2.10.0
PyPI
whatshap/whatshap
Read-based phasing of genomic variants, also called haplotype assembly
MITJul 31, 2026 · metrics 2.10.0
PyPI
tilezen/joerd
Joerd can be used to download, merge and generate tiles from digital elevation data
MITSep 9, 2026 · metrics 2.10.0
RubyGems
jarmo/require_all
A wonderfully simple way to load Ruby code
MITJul 28, 2026 · metrics 2.10.0
PyPI
HugoBlox/academic-file-converter
📚 Import Bibtex publications and Jupyter Notebook blog posts into your Markdown website or book. 将Bibtex转换为Markdown网站
MITJul 23, 2026 · metrics 2.10.0
PyPI
asweigart/PyGetWindow
A simple, cross-platform module for obtaining GUI information on applications' windows.
BSD-3-ClauseAug 24, 2026 · metrics 2.10.0
Go
dsnet/compress
Collection of compression related Go packages.
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Go
tidwall/pretty
Efficient JSON beautifier and compactor for Go
MITJul 28, 2026 · metrics 2.10.0
npm · Go
vshulcz/deja-vu
Your agents already solved this. deja finds it — retroactive search and MCP recall over the session logs your coding agents already wrote. Cross-agent, SSH-portable, one zero-dep binary, fully local.
MITJul 20, 2026 · metrics 2.10.0
PyPI
scrapy/w3lib
Python library of web-related functions
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
npm
TooTallNate/node-bindings
Helper module for loading your native module's `.node` file
MITAug 31, 2026 · metrics 2.10.0
Packagist
temporalio/sdk-php
Temporal PHP SDK
MITAug 4, 2026 · metrics 2.10.0
crates.io
SSheldon/rust-objc
Objective-C Runtime bindings and wrapper for Rust.
MITAug 13, 2026 · metrics 2.10.0
npm
ilammy/msvc-dev-cmd
GitHub Action to setup Developer Command Prompt for Microsoft Visual C++
MITSep 5, 2026 · metrics 2.10.0
—
ReactiveBayes/RxInfer.jl
Julia package for automated Bayesian inference on a factor graph with reactive message passing
MITJul 22, 2026 · metrics 2.10.0
npm
gajus/contents
Table of contents generator.
Custom licenseAug 4, 2026 · metrics 2.10.0
RubyGems
mjackson/citrus
Parsing Expressions for Ruby
No licenseJul 22, 2026 · metrics 2.10.0
—
ooc-lang/rock
:ocean: self-hosted ooc compiler that generates c99
MITJul 28, 2026 · metrics 2.10.0
PyPI
PyYoshi/cChardet
universal character encoding detector
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
troygoode/node-require-directory
Recursively iterates over specified directory, requiring each file, and returning a nested hash structure containing those libraries.
MITAug 4, 2026 · metrics 2.10.0
Go
iancoleman/orderedmap
orderedmap is a golang map where the keys keep the order that they're added. It can be de/serialized from/to JSON. It's based closely on the python collections.OrderedDict.
MITSep 5, 2026 · metrics 2.10.0
—
relevance/rcov
The new home of RCov on GitHub
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm · Go
humpback/humpback
Lightweight platform for managing containerized services.
Apache-2.0Aug 1, 2026 · metrics 2.10.0
Go
nxadm/tail
[Revamped] Go package for reading from continuously updated files (tail -f)
MITAug 4, 2026 · metrics 2.10.0