Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,567
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
mitchellh/reflectwalk
reflectwalk is a Go library for "walking" complex structures, similar to walking a filesystem.
MITJul 28, 2026 · metrics 2.10.0
RubyGems
Azure/azure-sdk-for-ruby
Ruby SDK for Azure Resource Manager: build and manage your Azure cloud infrastructure (Compute, Virtual Networks, Storage, etc...) using Ruby.
MITJul 20, 2026 · metrics 2.10.0
PyPI
a-r-j/ProteinWorkshop
Benchmarking framework for protein representation learning. Includes a large number of pre-training and downstream task datasets, models and training/task utilities. (ICLR 2024)
MITSep 8, 2026 · metrics 2.10.0
PyPI
pycroscopy/pycroscopy
Scientific analysis of nanoscale materials imaging data
MITJul 24, 2026 · metrics 2.10.0
npm
VenusProtocol/venus-protocol
BNB Smart Chain Venus Protocol
BSD-3-ClauseJul 29, 2026 · metrics 2.10.0
Packagist
amphp/parallel-functions
Simplified parallel processing for PHP based on Amp.
MITAug 13, 2026 · metrics 2.10.0
npm
luniehq/lunie
Lunie is staking, simplified ✨
Apache-2.0Aug 16, 2026 · metrics 2.10.0
Go
PasarGuard/node
PasarGuard Node | Decentralized Censorship-Resistant Access Layer
GPL-3.0Jul 20, 2026 · metrics 2.10.0
Maven
gitskarios/GithubAndroidSdk
[DEPRECATED] Android SDK for Github API
MITJul 27, 2026 · metrics 2.10.0
PyPI
grantjenks/py-tree-sitter-languages
Binary Python wheels for all tree sitter languages.
Custom licenseAug 11, 2026 · metrics 2.10.0
PyPI
finalduty/cis-benchmarks-audit
Simple command line tool to check for compliance against CIS Benchmarks
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
florimondmanca/asgi-lifespan
Programmatic startup/shutdown of ASGI apps.
MITAug 27, 2026 · metrics 2.10.0
npm
sindresorhus/yn
Parse yes/no like values
MITAug 29, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-java
Java grammar for tree-sitter
MITAug 27, 2026 · metrics 2.10.0
RubyGems
defunkt/colored
Colors in your terminal. Unmaintained.
MITJul 22, 2026 · metrics 2.10.0
NuGet
dodobrands/WebAuthn.Net
WebAuthn (Passkeys) library for .NET.
MITSep 7, 2026 · metrics 2.10.0
Go
cpuguy83/go-md2man
No repository description published.
MITJul 28, 2026 · metrics 2.10.0
Packagist · npm
dmitrybubyakin/nova-medialibrary-field
Laravel Nova field for managing the Spatie media library
MITJul 29, 2026 · metrics 2.10.0
—
lancaster-university/microbit-dal
No repository description published.
Custom licenseJul 26, 2026 · metrics 2.10.0
—
mwitkow/go-conntrack
Go middleware for net.Conn tracking (Prometheus/trace)
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Packagist
Chi-teck/drupal-code-generator
A code generator for Drupal.
GPL-2.0Aug 8, 2026 · metrics 2.10.0
npm
wowserhq/wowser
World of Warcraft in the browser using JavaScript and WebGL
MITJul 31, 2026 · metrics 2.10.0
Packagist · npm
neos/neos-ui
Neos CMS UI written in ReactJS with Immutable data structures.
GPL-3.0Sep 5, 2026 · metrics 2.10.0
Go
spf13/jwalterweatherman
So you always leave a note
MITJul 30, 2026 · metrics 2.10.0
crates.io
input-output-hk/rust-cardano
rust client libraries to deal with the current cardano mainnet (byron / cardano-sl)
MITJul 18, 2026 · metrics 2.10.0
npm
jshttp/etag
Create simple HTTP ETags
MITAug 4, 2026 · metrics 2.10.0
PyPI
matrix-org/matrix-python-sdk
Matrix Client-Server SDK for Python 2 and 3
Apache-2.0Jul 31, 2026 · metrics 2.10.0
PyPI
mbk-dev/okama
Investment portfolio and stocks analyzing tools for Python with free historical data
MITJul 19, 2026 · metrics 2.10.0
PyPI
ARM-software/SCP-firmware
This System Control Processor (SCP) firmware repository is no longer used and has been set to Read-only for archiving purposes. Please refer to the following active repository.
Custom licenseJul 22, 2026 · metrics 2.10.0
crates.io
KokaKiwi/rust-hex
A basic crate to encode values to hexadecimal representation. Originally extracted from rustc-serialize.
Apache-2.0Aug 3, 2026 · metrics 2.10.0