Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,730
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
JetBrains/java-annotations
Annotations for JVM-based languages.
Apache-2.0Jul 28, 2026 · metrics 2.10.0
—
esrlabs/git-repo
repo - The multiple repository tool (also works on MS Windows!)
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
AztecProtocol/aztec-connect
aztec connect repository
MITJul 23, 2026 · metrics 2.10.0
RubyGems
joshbuddy/jsonpath
Ruby implementation of http://goessner.net/articles/JsonPath/
MITJul 21, 2026 · metrics 2.10.0
—
rackspace/gophercloud
A Go SDK for OpenStack. IN FEATURE FREEZE. See Issue #592
Custom licenseJul 29, 2026 · metrics 2.10.0
—
ruzickap/packer-templates
Scripts and Templates used for generating Vagrant images
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
doowb/ansi-colors
Easily add ANSI colors to your text and symbols in the terminal. ansi-colors is the official ansi styling library for gulp. Used by hundreds of projects, including enquirer, vscode, codeql, azure data studio, aws-cdk, redwoodjs, leaflet, mocha, and many others.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
bebanjo/delorean
DISCONTINUED - Delorean lets you travel in time with Ruby by mocking Time.now
MITJul 22, 2026 · metrics 2.10.0
—
dotnet/core-setup
Installer packages for the .NET Core runtime and libraries
No licenseAug 22, 2026 · metrics 2.10.0
npm
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
MITJul 25, 2026 · metrics 2.10.0
PyPI
python-babel/flask-babel
i18n and l10n support for Flask based on Babel and pytz
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
sindresorhus/p-cancelable
Create a promise that can be canceled
MITAug 29, 2026 · metrics 2.10.0
npm
bruce/node-temp
Temporary File, Directory, and Stream support for Node.js
MITAug 27, 2026 · metrics 2.10.0
Go
goreleaser/godownloader
[DEPRECATED] Download Go binaries as fast and easily as possible.
MITJul 27, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-redis
Yii 2 Redis extension.
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
npm
devbookhq/splitter
React component for building split views like in VS Code
MITJul 24, 2026 · metrics 2.10.0
PyPI
mesosphere/marathon-lb
Marathon-lb is a service discovery & load balancing tool for DC/OS
Apache-2.0Jul 16, 2026 · metrics 2.10.0
Maven
spinnaker/clouddriver
read and write operations across cloud providers
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
bytedance/matxscript
A high-performance, extensible Python AOT compiler.
Apache-2.0Aug 11, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-cpp
C++ grammar for tree-sitter
MITAug 27, 2026 · metrics 2.10.0
Go
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
MITAug 2, 2026 · metrics 2.10.0
—
fsprojects/FsUnit
FsUnit makes unit-testing with F# more enjoyable. It adds a special syntax to your favorite .NET testing framework.
MITAug 4, 2026 · metrics 2.10.0
Go
StackExchange/wmi
WMI for Go
MITSep 6, 2026 · metrics 2.10.0
Packagist
creocoder/yii2-nested-sets
The nested sets behavior for the Yii framework.
Custom licenseAug 4, 2026 · metrics 2.10.0
NuGet
Azure/azure-storage-net
Microsoft Azure Storage Libraries for .NET
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Packagist
symfony/mercure
The Mercure Component allows to easily push updates to web browsers and other HTTP clients using the Mercure protocol.
MITAug 5, 2026 · metrics 2.10.0
—
Haixing-Hu/nju-thesis
南京大学学位论文XeLaTeX模板
GPL-2.0Aug 6, 2026 · metrics 2.10.0
—
mozilla/ssl-config-generator
Archived Mozilla SSL Configuration Generator . The code now lives at https://github.com/tlsref/configurator
MPL-2.0Jul 31, 2026 · metrics 2.10.0
npm
lupomontero/psl
JavaScript domain name parser based on the Public Suffix List
MITAug 29, 2026 · metrics 2.10.0
Packagist
tomzx/php-semver-checker
Compares two source sets and determines the appropriate semantic versioning to apply.
MITAug 5, 2026 · metrics 2.10.0