Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,374
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
mysticatea/event-target-shim
An implementation of WHATWG EventTarget interface, plus few extensions.
MITOct 20, 2026 · metrics 2.10.0
—
DEShawResearch/random123
Counter-based random number generators for C, C++ and CUDA.
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io
bcmyers/num-format
A Rust crate for producing string representations of numbers, formatted according to international standards
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
soldair/node-walkdir
Walk a directory tree emitting events based on the contents. API compatable with node-findit. Walk a tree of any depth. Fast! Handles permission errors. Stoppable. windows support. Pull requests are awesome. watchers are appreciated.
MITOct 18, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-jui
Yii 2 JQuery UI extension.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
crates.io
aldanor/qoi-rust
VERY fast encoder/decoder for QOI image format in pure and safe Rust
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
iarna/in-publish
Detect if we were run as a result of `npm publish`.
ISCOct 18, 2026 · metrics 2.10.0
crates.io
datenlord/s3-server
Generic S3 server implementation
MITOct 20, 2026 · metrics 2.10.0
npm
AckerApple/angular-file
Angular components for user file select, drop, and more
MITOct 22, 2026 · metrics 2.10.0
npm
PeculiarVentures/pkcs11js
A Node.js implementation of the PKCS#11 2.40 interface
MITOct 21, 2026 · metrics 2.10.0
Hex
elixir-waffle/waffle_ecto
Waffle.Ecto provides an integration with Waffle and Ecto
No licenseOct 19, 2026 · metrics 2.10.0
Packagist
pmmp/BedrockData
Blobs of data generated from Minecraft: Bedrock Edition used by PocketMine-MP
CC0-1.0Oct 20, 2026 · metrics 2.10.0
npm
w8r/splay-tree
Fast splay-tree data structure
No licenseOct 19, 2026 · metrics 2.10.0
PyPI · npm
schettino72/sphinx_press_theme
A Sphinx-doc theme based on Vuepress
Custom licenseOct 21, 2026 · metrics 2.10.0
—
AntelopeIO/leap
C++ implementation of the Antelope protocol
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
apple/ccs-pykerberos
Python Kerberos library used by CalendarServer
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
google/json5format
JSON5 (a.k.a., "JSON for Humans") formatter that preserves contextual comments
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-to-html
utility to serialize hast to HTML
MITOct 20, 2026 · metrics 2.10.0
npm
wxsms/vue-md-loader
:sparkles: Markdown files to ALIVE Vue components.
MITOct 21, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-assert-plus
Extra assertions on top of node's assert module
MITOct 21, 2026 · metrics 2.10.0
npm
request/tunnel-agent
HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
xiyaowong/coc-sumneko-lua
Lua extension using sumneko lua-language-server for coc.nvim
MITOct 19, 2026 · metrics 2.10.0
Packagist
yireo/magento2-replace-tools
No repository description published.
No licenseOct 23, 2026 · metrics 2.10.0
crates.io
yoshuawuyts/miow
A zero-overhead Windows I/O library, focusing on IOCP
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
thomasa88/ParametricText
Fusion 360™ add-in for creating Text Parameters in sketches.
MITOct 19, 2026 · metrics 2.10.0
PyPI
alvinlindstam/grapheme
A python package for grapheme aware string handling
MITOct 19, 2026 · metrics 2.10.0
Maven
mqttsnet/open-exp-plugin
open-exp-plugin 是一个示例插件，旨在展示如何开发和扩展 ThingLinks 平台的功能。此插件提供了一个实验性功能扩展示例，帮助开发者深入了解如何利用 ThingLinks 的 API 和插件架构进行自定义开发和集成。
Custom licenseOct 21, 2026 · metrics 2.10.0
Go
youmark/pkcs8
Go package implementing functions to parse and convert private keys in PKCS#8 format, as defined in RFC5208 and RFC5958
MITOct 21, 2026 · metrics 2.10.0
Packagist
maxbeckers/amazon-alexa-php
Php library for amazon echo (alexa) skill development.
MITOct 21, 2026 · metrics 2.10.0
Go
libp2p/go-libp2p-swarm
The libp2p swarm manages groups of connections to peers, and handles incoming and outgoing streams
MITOct 18, 2026 · metrics 2.10.0