Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,471
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Hex
rabbitmq/credentials-obfuscation
Tiny library/OTP app for credential obfuscation
Custom licenseOct 25, 2026 · metrics 2.10.0
PyPI
runtimeverification/pyk
Python tools for the K Framework
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
npm
samn/json-stable-stringify
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
Custom licenseSep 16, 2026 · metrics 2.10.0
npm · Go
sb0rka/sb0rka
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
sgodwincs/dlv-list-rs
No repository description published.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
shish/safe
All PHP functions, rewritten to throw exceptions instead of returning false
MITSep 13, 2026 · metrics 2.10.0
crates.io
sigp/rust-libp2p
The Rust Implementation of libp2p networking stack.
MITSep 20, 2026 · metrics 2.10.0
npm
streamich/tree-dump
Simple console tree printing helpers
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-raw
utility to reparse a hast tree
MITOct 21, 2026 · metrics 2.10.0
crates.io
tormol/encode_unicode
A rust library for converting between UTF-8, UTF-16 and UTF-32 characters.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
unoplatform/Uno.UITest
Unified UI Testing Framework for Uno Platform based applications
Custom licenseSep 11, 2026 · metrics 2.10.0
Packagist
yiisoft/cache-file
Yii Cache Library - File Handler
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/mailer-symfony
Yii Framework Symfony Mailer Integration
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/translator-message-php
Yii i18n PHP message storage
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yoanm/symfony-jsonrpc-http-server
Symfony JSON-RPC HTTP Server to convert an HTTP json-rpc request into HTTP json-rpc response
MITOct 23, 2026 · metrics 2.10.0
Go
Ahton89/terraform-provider-mongodb
No repository description published.
MITOct 25, 2026 · metrics 2.10.0
Hex
Beaudidly/gbor
A CBOR library implemented in Gleam
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
DjonnyX/ng-virtual-list
Multifunctional high-performance lists for Angular
MITSep 15, 2026 · metrics 2.10.0
npm
Khan/mathquill
Magic textboxes where you can type math as easily as writing!
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Packagist
Kunstmaan/KunstmaanUtilitiesBundle
[READ-ONLY] Subtree split of the Kunstmaan UtilitiesBundle -- master at Kunstmaan/KunstmaanBundlesCMS
MITOct 12, 2026 · metrics 2.10.0
—
OpenCilk/cilkrts
A copy of the Intel Cilk Plus runtime system with modifications to work with OpenCilk and its associated tools.
No licenseSep 15, 2026 · metrics 2.10.0
—
PagerDuty/pdagent-integrations
No repository description published.
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io · npm · PyPI
SpaceFrontiers/hermes
Archived. Development has moved to SpaceFrontiers/summa.
No licenseOct 22, 2026 · metrics 2.10.0
PyPI
VIDA-NYU/openclean-core
Data Cleaning and Data Profiling Library for Python
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
NuGet
VerifyTests/Verify.DiffPlex
Extends Verify to allow comparison of text via DiffPlex.
MITOct 23, 2026 · metrics 2.10.0
crates.io · npm
Zondax/ledger-namada
No repository description published.
Apache-2.0Oct 13, 2026 · metrics 2.10.0
RubyGems
accodeing/fortnox-api
Gem that abstracts Fortnox's F3 API
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
—
aussieaddons/plugin.video.sbs
SBS On Demand add-on for Kodi
GPL-3.0Sep 14, 2026 · metrics 2.10.0
PyPI
bioml-tools/bio-datasets
Bringing bio (molecules and more) to the Hugging Face Datasets library
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
blacktop/go-dwarf
Package dwarf provides access to DWARF debugging information loaded from executable files, as defined in the DWARF 2.0 Standard at http://dwarfstd.org/doc/dwarf-2.0.0.pdf
Custom licenseOct 19, 2026 · metrics 2.10.0