Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,611
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
558B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · Maven
aml-org/amf
AMF (AML Modeling Framework) is an open-source library capable of parsing and validating AML metadata documents.
Custom licenseAug 5, 2026 · metrics 2.10.0
Maven
appKODE/build-publish-plugin
Gradle plugin for Android that automates build publishing: consistent artifact naming + changelog/release notes generation, and variant-aware uploads to Firebase App Distribution, Confluence, Telegram, Slack and more
MITJul 20, 2026 · metrics 2.10.0
Go
arkarmin-gg/trashbox
Trashbox 🗑️ is a small, fast and cross-platform Go utility package for dealing with OS native Trash Box or Recycle Bin according to user OS. Include clean set of APIs for move file or directory to Trash Box, recovery and put back them to their original place and much more.
MITSep 3, 2026 · metrics 2.10.0
PyPI
binarynightowl/covid19_python
A fast, powerful, and flexible way to get up to date COVID-19 data for any major city, state, country, and total world wide data, with just one line of code
MITSep 8, 2026 · metrics 2.10.0
npm
component/is-module
No repository description published.
MITAug 29, 2026 · metrics 2.10.0
Packagist
composer-unused/contracts
Contract repository for composer-unused
MITJul 22, 2026 · metrics 2.10.0
Go · npm
contenox/contenox-v0
An agent server. Agents, tools and models declared in files; every action checked against your policy before it runs. Any LLM, on your machine, Apache-2.0.
Apache-2.0Sep 8, 2026 · metrics 2.10.0
crates.io
cowprotocol/gas-estimation
No repository description published.
Custom licenseJul 19, 2026 · metrics 2.10.0
Go
crate-crypto/go-kzg-4844
No repository description published.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
diplodoc-platform/translation
generate xlf and skeleton for translation and assemble markdown out of xlf and skeleton
MITAug 4, 2026 · metrics 2.10.0
Packagist · npm
e0ipso/schema-forms-php
Creates form definitions from JSON Schema property definitions and display configuration.
GPL-2.0Aug 18, 2026 · metrics 2.10.0
PyPI
encryptogroup/RAID-PIR
Multi-Server PIR (CCSW'14)
Custom licenseAug 14, 2026 · metrics 2.10.0
—
grosser/autotest-rails
No repository description published.
No licenseJul 22, 2026 · metrics 2.10.0
npm
indutny/offset-buffer
No repository description published.
MITAug 31, 2026 · metrics 2.10.0
npm
jridgewell/resolve-uri
Resolve a URI relative to an optional base URI
MITAug 4, 2026 · metrics 2.10.0
Packagist
laminas/laminas-psr7bridge
PSR-7 <-> laminas-http message conversions
BSD-3-ClauseJul 24, 2026 · metrics 2.10.0
Go
lasiar/canonicalheader
Golang linter checking the canonicality of the http header
MITAug 4, 2026 · metrics 2.10.0
npm
logux/oxc-configs
Oxlint & oxfmt shareable config for Logux
MITAug 1, 2026 · metrics 2.10.0
npm
mazixs/n8n-node-converter-documents
n8n community node that converts various document formats into structured JSON or text for AI agents and workflows.
MITJul 19, 2026 · metrics 2.10.0
npm
mickeypearce/vscode-oracle-format
PL/SQL formatter (using SQLcl)
No licenseAug 1, 2026 · metrics 2.10.0
—
namberino/nimble
The NIMBLE Programming Language
Apache-2.0Aug 14, 2026 · metrics 2.10.0
Hex
njonsson/structured_io
An Elixir API for consuming structured input streams
Custom licenseAug 1, 2026 · metrics 2.10.0
npm
novemberborn/common-path-prefix
Computes the longest prefix string that is common to each path, excluding the base component
ISCAug 31, 2026 · metrics 2.10.0
PyPI
olcf/wraprun
A flexible ALPS/Aprun task bundler
No licenseAug 18, 2026 · metrics 2.10.0
RubyGems
package-url/packageurl-ruby
Ruby implementation of the package url spec
MITJul 27, 2026 · metrics 2.10.0
Packagist
roadrunner-php/kv
:electric_plug: RoadRunner Key-Value storage SDK
MITJul 22, 2026 · metrics 2.10.0
npm
shibukawa/fm-index.jsx
FM-index is the fastest full text search algorithm using a compressed index file. This is FM-index for JSX/JS/AMD/Common.js.
MITAug 22, 2026 · metrics 2.10.0
npm
shikijs/vscode-textmate
Shiki's fork of `vscode-textmate`
MITAug 4, 2026 · metrics 2.10.0
npm
swagger-api/swagger-editor-cra
This is forked Create React App that builds SwaggerEditor@5
MITJul 20, 2026 · metrics 2.10.0
PyPI
tilde-lab/pycrystal
Utilities for ab initio modeling suite CRYSTAL, developed in Turin University
Custom licenseSep 8, 2026 · metrics 2.10.0