Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,319
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
microsoft/typed-rest-client
Node Rest and Http Clients with typings for use with TypeScript
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
lukeed/mri
Quickly scan for CLI flags and arguments
MITOct 20, 2026 · metrics 2.10.0
NuGet
VahidN/iTextSharp.LGPLv2.Core
iTextSharp.LGPLv2.Core is an unofficial port of the last LGPL version of the iTextSharp (V4.1.6) to .NET Core
Custom licenseOct 22, 2026 · metrics 2.10.0
Maven
census-instrumentation/opencensus-java
A stats collection and distributed tracing framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
Samyak2/toipe
yet another typing test, but crab flavoured
MITOct 19, 2026 · metrics 2.10.0
—
tmux-plugins/tmux-sidebar
A sidebar with the directory tree for the current path. Tries to make tmux more IDE like.
MITOct 20, 2026 · metrics 2.10.0
npm
postcss/postcss-load-config
Autoload Config for PostCSS
MITOct 20, 2026 · metrics 2.10.0
npm
pinterest/esprint
Fast eslint runner
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
uxlfoundation/oneDAL
oneAPI Data Analytics Library (oneDAL)
Apache-2.0Oct 16, 2026 · metrics 2.10.0
RubyGems
Mon-Ouie/pry-remote
Connect to Pry remotely
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
d3/d3-format
Format numbers for human consumption.
ISCOct 21, 2026 · metrics 2.10.0
Go
go-pdf/fpdf
A PDF document generator with high level support for text, drawing and images
MITOct 18, 2026 · metrics 2.10.0
npm
mfogel/polygon-clipping
Apply boolean polygon clipping operations (union, intersection, difference, xor) to your Polygons & MultiPolygons.
MITOct 19, 2026 · metrics 2.10.0
PyPI
pnpnpn/timeout-decorator
Timeout decorator for Python
MITOct 19, 2026 · metrics 2.10.0
—
mohae/deepcopy
Deep copy things
MITOct 21, 2026 · metrics 2.10.0
Go
clbanning/mxj
Decode / encode XML to/from map[string]interface{} (or JSON); extract values with dot-notation paths and wildcards. Replaces x2j and j2x packages.
MITOct 21, 2026 · metrics 2.10.0
Go
pkg/browser
Package browser provides helpers to open files, readers, and urls in a browser window.
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0
Packagist · npm
ebess/advanced-nova-media-library
A Laravel Nova field for displaying, creating, updating and ordering a Spatie Media Library model.
No licenseOct 22, 2026 · metrics 2.10.0
npm
faye/faye-websocket-node
Standards-compliant WebSocket client and server
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
kriskowal/asap
High-priority task queue for Node.js and browsers
MITOct 20, 2026 · metrics 2.10.0
npm
d3/d3-ease
Easing functions for smooth animation.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
PyPI
SigmaHQ/pySigma
Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
LGPL-2.1Oct 21, 2026 · metrics 2.10.0
RubyGems
threedaymonk/text
Collection of text algorithms. gem install text
Custom licenseOct 20, 2026 · metrics 2.10.0
RubyGems
vmg/rinku
Autolinking. Ruby. Yes, that's pretty much it.
ISCOct 20, 2026 · metrics 2.10.0
Go
dsoprea/go-exif
A very complete, highly tested, standards-driven (but customizable) EXIF reader/writer lovingly written in Go.
MITOct 18, 2026 · metrics 2.10.0
—
HewlettPackard/cacti
An integrated cache and memory access time, cycle time, area, leakage, and dynamic power model
No licenseOct 22, 2026 · metrics 2.10.0
npm
max-mapper/concat-stream
writable stream that concatenates strings or data and calls a callback with the result
MITOct 20, 2026 · metrics 2.10.0
npm
d3/d3-selection
Transform the DOM by selecting elements and joining to data.
ISCOct 21, 2026 · metrics 2.10.0
PyPI · npm · crates.io +1
tree-sitter/tree-sitter-python
Python grammar for tree-sitter
MITOct 21, 2026 · metrics 2.10.0
PyPI
IngoMeyer441/simple-term-menu
A Python package which creates simple interactive menus on the command line.
MITOct 20, 2026 · metrics 2.10.0