Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,252
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
NuGet
VahidN/iTextSharp.LGPLv2.Core
iTextSharp.LGPLv2.Core is an unofficial port of the last LGPL version of the iTextSharp (V4.1.6) to .NET Core
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
postcss/postcss-load-config
Autoload Config for PostCSS
MITOct 20, 2026 · metrics 2.10.0
PyPI
uxlfoundation/oneDAL
oneAPI Data Analytics Library (oneDAL)
Apache-2.0Oct 16, 2026 · metrics 2.10.0
PyPI
SigmaHQ/pySigma
Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
LGPL-2.1Oct 21, 2026 · metrics 2.10.0
Go
vernette/warpscout
🛰️ Cloudflare WARP endpoint scanner - find working endpoints over wg/awg/masque and see the exit region and edge node they land on
MITOct 18, 2026 · metrics 2.10.0
Go
nikepan/clickhouse-bulk
Collects many small inserts to ClickHouse and send in big inserts
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITOct 21, 2026 · metrics 2.10.0
Go
deckhouse/prompp
Deckhouse Prom++ – high-performance fork of Prometheus, designed to significantly reduce memory consumption
Custom licenseOct 18, 2026 · metrics 2.10.0
Packagist
mehdi-fathi/eloquent-filter
Eloquent Filter is a package for filter data of models by the query strings. Easy to use and fully dynamic.
MITOct 17, 2026 · metrics 2.10.0
Packagist
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
MITOct 20, 2026 · metrics 2.10.0
PyPI
scrapy/w3lib
Python library of web-related functions
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
PyPI
vlasovskikh/funcparserlib
Recursive descent parsing library for Python based on functional combinators
MITOct 20, 2026 · metrics 2.10.0
npm
audiojs/audio
High-level audio manipulations: loading, playback, analysis, editing, processing. 140+ plugins.
MITOct 20, 2026 · metrics 2.10.0
Packagist
yasintqvi/laravel-postman
A powerful package to automatically generate Postman collections from your Laravel routes with intelligent organization and rich documentation capabilities.
MITOct 22, 2026 · metrics 2.10.0
NuGet
dodobrands/WebAuthn.Net
WebAuthn (Passkeys) library for .NET.
MITOct 22, 2026 · metrics 2.10.0
Packagist · npm
neos/neos-ui
Neos CMS UI written in ReactJS with Immutable data structures.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
PyPI
dapper91/pydantic-xml
python xml for humans
UnlicenseOct 18, 2026 · metrics 2.10.0
Go
remind101/ssm-env
Expand env variables from AWS Parameter Store
BSD-2-ClauseOct 18, 2026 · metrics 2.10.0
npm
dcos/dcos-ui
The UI for The Datacenter Operating System
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
modern-python/that-depends
Simple, typed dependency-injection framework for Python
MITOct 22, 2026 · metrics 2.10.0
Maven
yandex/yatagan
Dependency Injection framework based on Google's Dagger2 API, optimized for fast builds and for managing large graphs with optional dependencies
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist · npm
yiisoft/yii2-framework
[READ ONLY] Yii 2 framework core code only. This is a subtree split off the "yii2" repository
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Packagist
glushkovds/phpclickhouse-laravel
Adapter of the most popular library https://github.com/smi2/phpClickHouse to Laravel
MITOct 19, 2026 · metrics 2.10.0
npm
input-output-hk/scrypto
Cryptographic primitives for Scala
CC0-1.0Oct 19, 2026 · metrics 2.10.0
Packagist
swayok/alternative-laravel-cache
Replacements for Laravel's redis and file cache stores that properly implement tagging idea
MITOct 19, 2026 · metrics 2.10.0
PyPI
ai-forever/gigachat
GigaChat API access library
MITOct 18, 2026 · metrics 2.10.0
Maven
kora-projects/kora
Kora is simple, easy, performant Java & Kotlin comprehensive framework for backend applications
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
Wissance/stringFormatter
A set of tools to manipulate text, i.e. making text from templates in C#/Python way is faster than fmt.Sprintf
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
sqlobject/sqlobject
SQLObject, an object-relational mapper for Python
LGPL-2.1Oct 16, 2026 · metrics 2.10.0
Packagist
skeeks-semenov/yii2-assets-auto-compress
Automatic compilation of js + css + html
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0