Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,733
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
sybrenstuvel/python-rsa
Python-RSA is a pure-Python RSA implementation.
Custom licenseJul 20, 2026 · metrics 2.10.0
npm
vladikoff/netflix-1080p-firefox
🍿 Force 1080p Netflix playback in Firefox
No licenseJul 22, 2026 · metrics 2.10.0
Packagist
sensiolabs/SensioDistributionBundle
Base bundle for Symfony Distributions
MITJul 25, 2026 · metrics 2.10.0
npm
stacktracejs/error-stack-parser
Extract meaning from JS Errors
MITAug 31, 2026 · metrics 2.10.0
crates.io
ogham/rust-ansi-term
Rust library for ANSI terminal colours and styles (bold, underline)
MITAug 13, 2026 · metrics 2.10.0
Packagist
php-http/curl-client
cURL client
MITAug 4, 2026 · metrics 2.10.0
npm
astracompiler/cli
🚀 Fast, reliable and easy-to-use js-to-exe compiler.
MITAug 1, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITAug 31, 2026 · metrics 2.10.0
—
avishorp/TM1637
Arduino library for TM1637 (LED Driver)
LGPL-3.0Aug 22, 2026 · metrics 2.10.0
npm
visionmedia/bytes.js
node byte string parser
MITAug 4, 2026 · metrics 2.10.0
NuGet
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
patrys/httmock
A mocking library for requests
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
ricmoo/pyaes
Pure-Python implementation of AES block-cipher and common modes of operation.
MITAug 27, 2026 · metrics 2.10.0
PyPI · Maven
grpc-ecosystem/grpc-opentracing
OpenTracing is a set of consistent, expressive, vendor-neutral APIs for distributed tracing and context propagation
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-authclient
Yii 2 authclient extension.
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
Packagist
webmozart/path-util
A robust cross-platform utility for normalizing, comparing and modifying file paths.
MITJul 30, 2026 · metrics 2.10.0
crates.io
mcarton/rust-derivative
A set of alternative `derive` attributes for Rust
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
meilisearch/milli
Search engine library for Meilisearch ⚡️
MITJul 26, 2026 · metrics 2.10.0
Maven
torvalds/subsurface-for-dirk
Do not use - the real upstream is Subsurface-divelog/subsurface
GPL-2.0Jul 27, 2026 · metrics 2.10.0
PyPI
robertlugg/easygui
easygui for Python
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
Maven
LatencyUtils/LatencyUtils
Utilities for latency measurement and reporting
Custom licenseAug 21, 2026 · metrics 2.10.0
Packagist
gitonomy/gitlib
Library for accessing Git repositories with PHP
MITAug 13, 2026 · metrics 2.10.0
RubyGems
omniauth/omniauth-github
GitHub strategy for OmniAuth
MITJul 28, 2026 · metrics 2.10.0
npm
Netflix-Skunkworks/stethoscope-app
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
d3/d3-array
Array manipulation, ordering, searching, summarizing, etc.
ISCAug 31, 2026 · metrics 2.10.0
PyPI
databrickslabs/dbx
🧱 Databricks CLI eXtensions - aka dbx is a CLI tool for development and advanced Databricks workflows management.
Custom licenseAug 23, 2026 · metrics 2.10.0
PyPI
python-xlib/python-xlib
XLib in pure Python (Py2/Py3 compatible)
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
Packagist · npm
mokhosh/filament-kanban
Add kanban boards to your Filament pages
MITJul 22, 2026 · metrics 2.10.0
npm
eslint/doctrine
JSDoc parser
Apache-2.0Aug 4, 2026 · metrics 2.10.0