Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,382
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
maxbeckers/amazon-alexa-php
Php library for amazon echo (alexa) skill development.
MITOct 21, 2026 · metrics 2.10.0
Go
libp2p/go-libp2p-swarm
The libp2p swarm manages groups of connections to peers, and handles incoming and outgoing streams
MITOct 18, 2026 · metrics 2.10.0
Maven
openjsse/openjsse
OpenJSSE: A JSSE provider that supports TLS 1.3 on Java SE 8
GPL-2.0Oct 19, 2026 · metrics 2.10.0
—
srawlins/timezone
Time zone database and time zone aware DateTime object for Dart.
BSD-2-ClauseOct 22, 2026 · metrics 2.10.0
Maven
ndw/xmlcalabash1
XML Calabash, an XProc processor
No licenseOct 19, 2026 · metrics 2.10.0
PyPI
wemake-services/flake8-broken-line
🚨 Flake8 plugin to forbid backslashes (\) for line breaks
MITOct 19, 2026 · metrics 2.10.0
PyPI
allenai/allennlp-semparse
A framework for building semantic parsers (including neural module networks) with AllenNLP, built by the authors of AllenNLP
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
ethereum-optimism/asterisc
RISC-V interactive fault proof tech
MITOct 21, 2026 · metrics 2.10.0
npm · crates.io
bitcoinjs/tiny-secp256k1
A tiny secp256k1 native/JS wrapper
MITOct 17, 2026 · metrics 2.10.0
Packagist
aVadim483/fast-excel-reader
Lightweight and very fast XLSX Excel Spreadsheet and CSV Reader in PHP
MITOct 22, 2026 · metrics 2.10.0
PyPI
lkreidberg/batman
Fast transit light curves models in Python.
GPL-3.0Oct 22, 2026 · metrics 2.10.0
npm
cladd-ui/cladd
React UI kit for building actual apps.
MITOct 22, 2026 · metrics 2.10.0
npm
dawsbot/config-chain
Handle configuration once and for all
MITOct 20, 2026 · metrics 2.10.0
Packagist
rectorphp/type-perfect
Next level type declaration check PHPStan rules
MITOct 20, 2026 · metrics 2.10.0
PyPI
ansible-collections/junipernetworks.junos
Ansible Network Collection for Juniper JunOS
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
bcoin-org/bcrypto
JS crypto library
Custom licenseOct 22, 2026 · metrics 2.10.0
Packagist
chriskonnertz/string-calc
PHP calculator library for mathematical terms (expressions) passed as strings
MITOct 18, 2026 · metrics 2.10.0
Go
hashicorp/terraform-provider-postgresql
As part of our introduction to self-service publishing in the Terraform Registry, this copy of the provider has been archived, and ownership has been transferred to active maintainers in the community. Please see the new location on the Terraform Registry: https://registry.terraform.io/providers/cyrilgdn/postgresql
MPL-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
lndk-org/lndk
No repository description published.
MITOct 20, 2026 · metrics 2.10.0
PyPI
chrisrude/oobabot
A Discord bot which talks to Large Language Model AIs running on oobabooga's text-generation-webui
MITOct 19, 2026 · metrics 2.10.0
Maven
conductor-framework/conductor
[NO LONGER MAINTAINED] The Selenium framework that takes you where you want to go
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
hashicorp/consul-api-gateway
The Consul API Gateway is a dedicated ingress solution for intelligently routing traffic to applications running on a Consul Service Mesh.
MPL-2.0Oct 22, 2026 · metrics 2.10.0
npm
inrupt-archived/solid-ui-react
React SDK using @inrupt/solid-client
MITOct 19, 2026 · metrics 2.10.0
PyPI
ninemoreminutes/django-crum
Django CRUM (Current Request User Middleware) captures the current request and user in thread local storage.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
spdy-http2/spdy-transport
SPDY v2, v3, v3.1 and HTTP2 transport implementation for node.js
No licenseOct 21, 2026 · metrics 2.10.0
npm
miadabdi/editorjs-parser
This package parses output blocks of Editorjs to html
MITOct 21, 2026 · metrics 2.10.0
Maven
sebfz1/wicket-jquery-ui
jQuery UI & Kendo UI integration in Wicket
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
milvus-io/milvus-insight
Milvus management GUI
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
nightscout/share2nightscout-bridge
azure sidecar, bridges Dexcom share2 to Nightscout
No licenseOct 23, 2026 · metrics 2.10.0
Go
chai2010/gettext-go
:ab: GNU gettext for Go (Imported By Kubernetes)
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0