Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,746
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
jridgewell/set-array
No repository description published.
MITAug 4, 2026 · metrics 2.10.0
npm
justinmc/tiny-molecule
A small, developer-friendly 3D molecule viewer for the modern web
MITSep 8, 2026 · metrics 2.10.0
PyPI · npm
keyfire/elemctl
CLI, MCP server, and library for the documented Console API v2 of 1C:Enterprise.Element (1cmycloud): apps, builds, and deploys with reliable apply-verification.
MITAug 18, 2026 · metrics 2.10.0
npm
mafintosh/mkdirp-classic
Mirror of mkdirp 0.5.2
MITAug 31, 2026 · metrics 2.10.0
—
maplibre/maplibre-native-base
MapLibre Native Base C++ Libraries
BSD-3-ClauseAug 22, 2026 · metrics 2.10.0
Go
michaelrampl/commity
Make writing commit messages fun again.
No licenseAug 22, 2026 · metrics 2.10.0
PyPI
mindsdb/cowork-server
FastAPI backend for MindsHub Cowork. Manages projects, conversations, files, scheduling, memory, and agent orchestration with a SQLite-backed data layer.
AGPL-3.0Jul 30, 2026 · metrics 2.10.0
Packagist
moonshine-software/import-export
No repository description published.
MITSep 5, 2026 · metrics 2.10.0
—
newrelic/nuget-azure-cloud-services
The nuget package for x64 apps (VMs or Cloud Services - Web Roles | Worker Roles) running on Windows Azure
MITJul 29, 2026 · metrics 2.10.0
—
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
MITJul 24, 2026 · metrics 2.10.0
PyPI
scieloorg/ioisis
I/O for ISIS files in Python
BSD-2-ClauseAug 24, 2026 · metrics 2.10.0
NuGet
simplygoodsoftware/pyrusapi-csharp
No repository description published.
MITAug 28, 2026 · metrics 2.10.0
npm
sinonjs/commons
Simple functions shared among the sinon end user libraries
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm · NuGet
skbkontur/cassandra-distributed-task-queue
.NET library implementing distributed task queue machinery using Apache Cassandra
MITJul 31, 2026 · metrics 2.10.0
Packagist
spiral/exceptions
[READ ONLY] Universal Exception Handler: console, web exception handlers, code highlights, snapshotting support. Subtree split of the Spiral Exceptions component (see spiral/framework)
MITAug 5, 2026 · metrics 2.10.0
Packagist
spiral/reactor
[READ ONLY] Code Scaffolding using declarative OOP wrappers. Subtree split of the Spiral Reactor component (see spiral/framework)
MITAug 22, 2026 · metrics 2.10.0
Packagist
spiral/validator
The component provides an array-based DSL to construct complex validation chains.
MITAug 14, 2026 · metrics 2.10.0
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITAug 4, 2026 · metrics 2.10.0
RubyGems
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
MITAug 21, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Aug 11, 2026 · metrics 2.10.0
Maven
1c-syntax/utils
No repository description published.
GPL-3.0Jul 21, 2026 · metrics 2.10.0
crates.io
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
MITAug 23, 2026 · metrics 2.10.0
Packagist
Automattic/sqlite-database-integration
A fork of https://github.com/WordPress/sqlite-database-integration/.
GPL-2.0Jul 25, 2026 · metrics 2.10.0
Go
AzureAD/microsoft-authentication-extensions-for-go
Secure cross-platform token cache for MSAL public client apps
MITJul 27, 2026 · metrics 2.10.0
Go
Bedrock-OSS/go-burrito
No repository description published.
MITAug 1, 2026 · metrics 2.10.0
—
Consensys/go-ethereum
Official golang implementation of the Ethereum protocol
LGPL-3.0Aug 3, 2026 · metrics 2.10.0
RubyGems · crates.io
DataDog/libddprof
libddprof has been renamed to libdatadog and development has moved to https://github.com/datadog/libdatadog
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Go
DataDog/viper
Go configuration with fangs
MITAug 1, 2026 · metrics 2.10.0