Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,160
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
mochi-mqtt/server
The fully compliant, embeddable high-performance Go MQTT v5 server for IoT, smarthome, and pubsub
MITSep 20, 2026 · metrics 2.10.0
crates.io
retep998/winapi-rs
Rust bindings to Windows API
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
dominictarr/JSONStream
rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
dchest/tweetnacl-js
Port of TweetNaCl cryptographic library to JavaScript
UnlicenseSep 17, 2026 · metrics 2.10.0
npm
vercel/async-retry
Retrying made simple, easy and async
MITSep 17, 2026 · metrics 2.10.0
PyPI
pmaupin/pdfrw
pdfrw is a pure Python library that reads and writes PDFs
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
thampiman/reverse-geocoder
A fast, offline reverse geocoder in Python
LGPL-2.1Sep 17, 2026 · metrics 2.10.0
PyPI
microsoft/BlingFire
A lightning fast Finite State machine and REgular expression manipulation library.
MITSep 17, 2026 · metrics 2.10.0
npm
feross/buffer
The buffer module from node.js, for the browser.
Custom licenseSep 16, 2026 · metrics 2.10.0
—
Tufte-LaTeX/tufte-latex
A Tufte-inspired LaTeX class for producing handouts, papers, and books
No licenseSep 19, 2026 · metrics 2.10.0
npm
shouldjs/should.js
BDD style assertions for node.js -- test framework agnostic
MITSep 17, 2026 · metrics 2.10.0
PyPI
alpacahq/alpaca-trade-api-python
Python client for Alpaca's trade API
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
tdegrunt/jsonschema
JSON Schema validation
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
timsainb/noisereduce
Noise reduction in python using spectral gating (speech, bioacoustics, audio, time-domain signals)
MITSep 17, 2026 · metrics 2.10.0
PyPI
long2ice/fastapi-cache
fastapi-cache is a tool to cache fastapi response and function result, with backends support redis and memcached.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
fent/randexp.js
Create random strings that match a given regular expression.
MITSep 17, 2026 · metrics 2.10.0
npm
alexreardon/tiny-invariant
A tiny invariant function
MITSep 17, 2026 · metrics 2.10.0
PyPI
descriptinc/descript-audio-codec
State-of-the-art audio codec with 90x compression factor. Supports 44.1kHz, 24kHz, and 16kHz mono/stereo audio.
MITSep 17, 2026 · metrics 2.10.0
npm
bripkens/connect-history-api-fallback
Fallback to index.html for applications that are using the HTML 5 history API
MITSep 17, 2026 · metrics 2.10.0
crates.io · PyPI
risinglightdb/risinglight
An educational OLAP database system.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
webpack-contrib/file-loader
File Loader
MITSep 17, 2026 · metrics 2.10.0
Packagist
shuchkin/simplexlsx
Parse and retrieve data from Excel XLSx files
MITSep 17, 2026 · metrics 2.10.0
crates.io
samwho/spacer
CLI tool to insert spacers when command output stops
MITSep 17, 2026 · metrics 2.10.0
npm
frenic/csstype
Strict TypeScript and Flow types for style based on MDN data
MITSep 16, 2026 · metrics 2.10.0
Packagist
schmittjoh/metadata
Metadata is a library for metadata management in PHP
MITSep 16, 2026 · metrics 2.10.0
npm
hughsk/flat
:steam_locomotive: Flatten/unflatten nested Javascript objects
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
mridgway/hoist-non-react-statics
Copies non-react specific statics from a child component to a parent component
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
catherinedevlin/ipython-sql
%%sql magic for IPython, hopefully evolving into full SQL client
MITSep 17, 2026 · metrics 2.10.0
crates.io · Go · PyPI
dfinity/ic
Internet Computer blockchain source: the client/replica software run by nodes
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
ilearnio/module-alias
Register aliases of directories and custom module paths in Node
MITSep 17, 2026 · metrics 2.10.0