Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,721
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
Yoast/yoast-components
Accessible React components by Yoast
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Packagist
aVadim483/fast-excel-templator
Lightweight and very fast Excel Spreadsheet generator from XLSX-templates in PHP
MITSep 13, 2026 · metrics 2.10.0
—
alexandre-abrioux/golem-node
Dockerized Golem Network Provider Node
MITOct 9, 2026 · metrics 2.10.0
Packagist
amphp/phpunit-util
Helper package to ease testing with PHPUnit.
MITSep 14, 2026 · metrics 2.10.0
Go
blizzy78/varnamelen
Go analyzer checking that the length of a variable's name matches its usage scope
MITSep 16, 2026 · metrics 2.10.0
Go
blocktree/go-owcrypt
openwallet supported crypto library
No licenseSep 29, 2026 · metrics 2.10.0
Go
celestiaorg/celestia-openrpc
OpenRPC client of celestia-node, without dependencies on celestia-node/celestia-app/cosmos-sdk.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
css-modules/icss-utils
Search & replace tokens during the linking stage of ICSS loading
ISCOct 20, 2026 · metrics 2.10.0
npm
dk1a/solidity-stringutils
StrSlice & Slice library for Solidity
MITSep 19, 2026 · metrics 2.10.0
RubyGems
e2/ruby_dep
Automatically helps determine supported Rubies based on .travis.yml file
MITSep 11, 2026 · metrics 2.10.0
Go
ehmo/gomoufox
Go library, CLI, and MCP server for Camoufox browser automation.
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
flash-oss/aba-generator
Generate Australian banking ABA file
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Maven
goto1134/structurizr-d2-exporter
Export structurizr views to D2 diagrams
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
hughsk/is-typedarray
Detect whether or not an object is a Typed Array
Custom licenseSep 16, 2026 · metrics 2.10.0
npm · Packagist
javiereguiluz/EasyAdminBundle
The new (and simple) admin generator for Symfony applications.
MITSep 12, 2026 · metrics 2.10.0
npm
jaystack/odata-v4-sql
OData V4 SQL
No licenseSep 10, 2026 · metrics 2.10.0
—
jsdom/domexception
An implementation of the DOMException class from browsers
No licenseOct 21, 2026 · metrics 2.10.0
npm
jsdom/w3c-xmlserializer
An XML serializer that follows the W3C specification.
MITSep 16, 2026 · metrics 2.10.0
RubyGems
koic/rubocop-faker
A RuboCop extension for Faker.
MITSep 11, 2026 · metrics 2.10.0
RubyGems
krainboltgreene/paper_trail-background.rb
Process Papertrail versioning in the background
Custom licenseSep 13, 2026 · metrics 2.10.0
Packagist
laminas/laminas-mvc-middleware
Dispatch middleware pipelines in place of controllers in laminas-mvc.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
lingfeiwang/findr
Fast Inference of Networks from Directed Regulations
AGPL-3.0Oct 18, 2026 · metrics 2.10.0
Hex
mathieuprog/tz_extra
A few utilities to work with time zones in Elixir
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm
mattdsteele/java-properties
Node module to read and interpolate Java .properties files
MITSep 15, 2026 · metrics 2.10.0
PyPI
minrk/asyncio-atexit
atexit, but for asyncio
MITOct 20, 2026 · metrics 2.10.0
Hex
mirego/plug_image_processing
Endpoint to process images within your Plug application, compatible with imaginary API
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
moby/locker
This is a direct pull from https://github.com/moby/moby/tree/master/pkg/locker
Apache-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
nervosnetwork/ckb-sdk-ruby
Ruby SDK for CKB
MITSep 23, 2026 · metrics 2.10.0
crates.io
nervosnetwork/mercury
Building on top of ckb-indexer, Mercury provides handy integration features for Nervos CKB.
MITSep 13, 2026 · metrics 2.10.0
crates.io
niklastreml/gitlab-tui
A terminal based UI for interacting with your gitlab issues and merge requests
Apache-2.0Sep 19, 2026 · metrics 2.10.0