Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,504
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
koopjs/FeatureServer
An open source Geoservices Implementation (deprecated)
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
ninemoreminutes/django-crum
Django CRUM (Current Request User Middleware) captures the current request and user in thread local storage.
Custom licenseAug 19, 2026 · metrics 2.10.0
Packagist · npm
silverstripe/silverstripe-blog
Blog module for Silverstripe CMS
BSD-2-ClauseJul 22, 2026 · metrics 2.10.0
PyPI
wraith-wireless/PyRIC
Python wireless library for Linux
Custom licenseAug 24, 2026 · metrics 2.10.0
Go
Kong/go-kong
Go binding for Kong's admin API
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
click-contrib/click-didyoumean
Enable git-like did-you-mean feature in click :sparkles:
MITSep 9, 2026 · metrics 2.10.0
Go
hashicorp/consul-api-gateway
The Consul API Gateway is a dedicated ingress solution for intelligently routing traffic to applications running on a Consul Service Mesh.
MPL-2.0Sep 6, 2026 · metrics 2.10.0
npm
inrupt-archived/solid-ui-react
React SDK using @inrupt/solid-client
MITAug 17, 2026 · metrics 2.10.0
npm
sharetribe/ftw-daily
Deprecated! Sharetribe Flex Template for Web
Custom licenseAug 16, 2026 · metrics 2.10.0
npm
spdy-http2/spdy-transport
SPDY v2, v3, v3.1 and HTTP2 transport implementation for node.js
No licenseAug 31, 2026 · metrics 2.10.0
npm
brianloveswords/buffer-crc32
A pure javascript CRC32 algorithm that plays nice with binary data
MITAug 4, 2026 · metrics 2.10.0
crates.io
tauri-apps/javascriptcore-rs
JavaScriptCore bindings and wrappers for Rust
MITAug 13, 2026 · metrics 2.10.0
Go
v2rayA/shadowsocksR
ShadowsocksR(SSR) library for Go. Deprecated. Use https://github.com/mzz2017/softwind/tree/main/transport/shadowsocksr instead.
MITJul 28, 2026 · metrics 2.10.0
Go
deckhouse/yandex-csi-driver
A Container Storage Interface (CSI) Driver for Yandex.Cloud Compute Disks
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go
go-furnace/go-furnace
Go Hosting Solution for AWS, Google Cloud and Digital Ocean
MITJul 30, 2026 · metrics 2.10.0
npm
cladd-ui/cladd
React UI kit for building actual apps.
MITSep 8, 2026 · metrics 2.10.0
npm
fent/ret.js
Tokenizes a string that represents a regular expression.
MITAug 31, 2026 · metrics 2.10.0
PyPI
kip-hart/MicroStructPy
Microstructure modeling, mesh generation, analysis, and visualization.
MITSep 9, 2026 · metrics 2.10.0
Packagist
phpDocumentor/GraphViz
No repository description published.
MITAug 13, 2026 · metrics 2.10.0
Packagist
FriendsOfBehat/MinkBrowserKitDriver
Symfony2 BrowserKit driver for Mink framework
MITJul 28, 2026 · metrics 2.10.0
Maven
googleapis/sdk-platform-java
Tooling and shared libraries for Cloud SDK for Java
Apache-2.0Jul 30, 2026 · metrics 2.10.0
crates.io
mrDIMAS/hrtf
Head-Related Transfer Function (HRTF) audio signal processor.
MITAug 9, 2026 · metrics 2.10.0
Packagist
Nyholm/psr7-server
Helper classes to use any PSR7 implementation as your main request and response
MITAug 27, 2026 · metrics 2.10.0
crates.io
RustCrypto/block-modes
Collection of generic block mode algorithms written in pure Rust
No licenseAug 11, 2026 · metrics 2.10.0
Packagist
akeneo/api-php-client
PHP client of Akeneo PIM API
Custom licenseAug 7, 2026 · metrics 2.10.0
crates.io
kornelski/deunicode
Convert Unicode to ASCII "Ôóű, 🦄☣ in 北亰" :arrow_right: "Oou, unicorn face biohazard in Bei Jing"
Custom licenseAug 13, 2026 · metrics 2.10.0
Go
kr/text
Miscellaneous functions for formatting text
MITJul 28, 2026 · metrics 2.10.0
npm
milvus-io/milvus-insight
Milvus management GUI
Apache-2.0Sep 1, 2026 · metrics 2.10.0
Packagist
rdohms/dms-filter
Library that offers Input Filtering based on Annotations for use with Objects. Check out 2.dev for 2.0 pre-release.
MITJul 26, 2026 · metrics 2.10.0
npm
sindresorhus/has-flag
Check if argv has a specific flag
MITAug 4, 2026 · metrics 2.10.0