Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,500
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
isaacs/proto-list
A list of objects bound by prototype chain
BlueOak-1.0.0Oct 20, 2026 · metrics 2.10.0
npm
karma-runner/karma-safari-launcher
A Karma plugin. Launcher for Safari.
MITOct 18, 2026 · metrics 2.10.0
PyPI
ormeilu/avoid-ai-writing-russian
Скилл для ИИ-агентов и CLI на Python/uv: находит и убирает ИИ-стиль в русских текстах (канцелярит, кальки, штампы), проверяет сохранность правки и оценивает текст по фрагментам в духе «Антиплагиата» с калибровкой по вашим отчётам. Русская адаптация avoid-ai-writing.
MITOct 19, 2026 · metrics 2.10.0
—
svaarala/duktape-releases
Duktape release binaries
No licenseOct 18, 2026 · metrics 2.10.0
Maven
valtimo-platform/valtimo-backend-libraries
Welcome at the Valtimo repository. Valtimo is the less-code platform for Business Process Automation. Built on top of business process orchestrator Camunda. Valtimo's goal is to make implementing business process automation and case management easy. Valtimo is the server side component for business process automation.
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
yargs/require-main-filename
shim for require.main.filename() that works in as many environments as possible
ISCOct 20, 2026 · metrics 2.10.0
crates.io · npm
GrinZero/dpdm-fast
Detect circular dependencies in your TypeScript projects with `Rust`.
MITOct 20, 2026 · metrics 2.10.0
npm
airano-ir/skillhub
Open-source marketplace for AI Agent skills
MITOct 20, 2026 · metrics 2.10.0
npm
aurelia/pal
Aurelia's Platform Abstraction Layer
MITOct 19, 2026 · metrics 2.10.0
Go
binbandit/sage
Burning away Git complexity
MITOct 19, 2026 · metrics 2.10.0
PyPI
brettcannon/modutil
A library for working with Python modules
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
No licenseOct 22, 2026 · metrics 2.10.0
Go · npm
coretrix/hitrix
No repository description published.
GPL-3.0Oct 19, 2026 · metrics 2.10.0
npm
ealush/flairup
🎩 CSS-In-JS Library for package authors
MITOct 16, 2026 · metrics 2.10.0
npm
jonschlinkert/is-extendable
Answers the question: "can this value have keys?". Returns true if a value is any of the object types: array, regexp, plain object, function or date. Useful for determining if a value is an object that can be extended.
MITOct 20, 2026 · metrics 2.10.0
Go
snapp-incubator/health-exporter
A prometheus exporter which provides metrics to check remote endpoints health.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
spdy-http2/handle-thing
The Thing when you need it
No licenseOct 21, 2026 · metrics 2.10.0
Packagist
spiral/cycle-bridge
🌉 Cycle ORM v2 bridge to Spiral Framework
MITOct 20, 2026 · metrics 2.10.0
npm
stur86/crystvis-js
A Three.js based crystallographic visualisation tool
MITOct 18, 2026 · metrics 2.10.0
crates.io
swgillespie/unicode-categories
A simple crate that allows for unicode categories can be queried for characters.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
theofidry/console
Library for creating CLI commands or applications
MITOct 22, 2026 · metrics 2.10.0
Go
useinsider/go-pkg
No repository description published.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
OpenFunction/functions-framework-go
Go functions framework for OpenFunction
No licenseOct 19, 2026 · metrics 2.10.0
—
SpiNNakerManchester/spinnaker_tools
SpiNNaker API, sark, sc&mp, bmp firmware and build tools
Apache-2.0Oct 21, 2026 · metrics 2.10.0
NuGet
StockSharp/Ecng
System framework with utility projects. Used by StockSharp platform
Custom licenseOct 20, 2026 · metrics 2.10.0
Packagist
Sylius/SyliusInventoryBundle
[READ-ONLY] Flexible inventory management for Symfony2 e-commerce applications.
MITOct 21, 2026 · metrics 2.10.0
npm
artilleryio/artillery-plugin-publish-metrics
Moved to https://github.com/artilleryio/artillery/tree/main/packages/artillery-plugin-publish-metrics
No licenseOct 23, 2026 · metrics 2.10.0
Go · npm
brigadecore/brigade-github-app
A Brigade v1.x compatible gateway for forwarding events from GitHub to Brigade
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
consensus-shipyard/ipc-libs
Implementation of an IPC client and libraries
MITOct 21, 2026 · metrics 2.10.0
—
dotnet/source-build-externals
This repo contains the source that resides outside of the dotnet organization required to build .NET from source.
No licenseOct 18, 2026 · metrics 2.10.0