Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,067
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
weka/easypy
This repository will no longer be maintained. See instead https://github.com/real-easypy/easypy
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
Go
werf/3p-helm
The Kubernetes Package Manager
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
wilsonjackson/add-stream
Append the contents of one stream onto another.
No licenseSep 23, 2026 · metrics 2.10.0
npm
wooorm/is-hexadecimal
Check if a character is hexadecimal
MITSep 16, 2026 · metrics 2.10.0
Go · PyPI
wtsi-ssg/wr
experimental reimplementation of wr using TDD
MITSep 19, 2026 · metrics 2.10.0
PyPI
wzmao/mbio
Biology python package
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
xbrekz1/rbac-manager
Production-grade Kubernetes RBAC Manager Operator
No licenseSep 12, 2026 · metrics 2.10.0
Packagist
xefi/phpstan-xefi-rules
Some custom PHPStan extensions to improve the readability, maintainability and overall quality of your PHP code base.
Apache-2.0Oct 13, 2026 · metrics 2.10.0
PyPI
xrxbsx/goldmine
Goldmine, a new bot for Discord that keeps things nice and snug. Featuring VOICE (MUSIC), NATURAL LANGUAGE, IMAGES, CUSTOM WIDGETS, RANKS, and more!
MITSep 16, 2026 · metrics 2.10.0
NuGet
ydb-platform/ydb-dotnet-genproto
.NET codegen for YDB API protos.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
zaibon/ircbot
Simple irc bot in Go
MITOct 18, 2026 · metrics 2.10.0
Hex
zblanco/libgraph
A graph data structure library for Elixir projects
MITSep 11, 2026 · metrics 2.10.0
PyPI
zhengbw0324/RecBole
A unified, comprehensive and efficient recommendation library
MITSep 13, 2026 · metrics 2.10.0
npm
zoltan-mihalyi/eversource
Eversource: A HTML5-based 2D MMORPG with pixel graphics
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
0x0FACED/sval
sval is a simple struct validator that can be fully configured through config file
No licenseSep 19, 2026 · metrics 2.10.0
Go
0xmhha/code-knowledge-graph
No repository description published.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
0xmhha/code-knowledge-vector
No repository description published.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
RubyGems
18F/identity-validations
A gem to provide validators that can be used across multiple repositories.
Custom licenseSep 18, 2026 · metrics 2.10.0
—
1zumiSagiri/.conf
random config
No licenseSep 16, 2026 · metrics 2.10.0
—
3mdeb/heads
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops and servers.
GPL-2.0Sep 11, 2026 · metrics 2.10.0
—
AdaptiveCards/AdaptiveCards
A new way for developers to exchange card content in a common and consistent way.
MITOct 22, 2026 · metrics 2.10.0
Go
AlexanderGrooff/jinja-go
Jinja library that acts just like the Python Jinja library but written in Golang
MITSep 19, 2026 · metrics 2.10.0
Go
AlexanderMac/gosu
A package for self updating Go applications
MITSep 19, 2026 · metrics 2.10.0
Go
AlexandrFiner/sshhh
🤫 Quiet ssh launcher with a collapsible host browser
MITSep 18, 2026 · metrics 2.10.0
Go
Aneurysm9/opentelemetry-go
OpenTelemetry Go API and SDK
Apache-2.0Oct 12, 2026 · metrics 2.10.0
—
Ardougne/Newcord
A colorful BetterDiscord theme inspired by the first page of Discord's website.
MITSep 16, 2026 · metrics 2.10.0
Go
ArtemYeremeev/SQaLice-compiler
go-swagger compiler
MITSep 17, 2026 · metrics 2.10.0
Go
Axione/horus
Horus is a distributed tool to collect snmp and icmp metrics from various network equipments and send the results to kafka, NATS.io, prometheus, and/or influxDB
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
AylosDev/disk-health-exporter
Prometheus ready disk health exporter
Custom licenseOct 18, 2026 · metrics 2.10.0
—
BRMcLaren/openenclave
SDK for developing enclaves
MITSep 12, 2026 · metrics 2.10.0