Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,690
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
584B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
nashwaan/xml-js
Converter utility between XML text and Javascript object / JSON text.
MITAug 13, 2026 · metrics 2.10.0
PyPI
rbgirshick/yacs
YACS -- Yet Another Configuration System
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Go
grpc-ecosystem/go-grpc-prometheus
Prometheus monitoring for your gRPC Go servers.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
—
subsquid/squid-sdk
TypeScript ETL toolkit for indexing Ethereum, Solana, and Substrate data, sourced from SQD Network.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go
valyala/bytebufferpool
Anti-memory-waste byte buffer pool
MITJul 28, 2026 · metrics 2.10.0
—
opencover/opencover
A code coverage tool for .NET 2 and above (WINDOWS OS only), support for 32 and 64 processes with both branch and sequence points
Custom licenseJul 18, 2026 · metrics 2.10.0
RubyGems
thoughtbot/appraisal
A Ruby library for testing your library against different versions of dependencies.
MITSep 9, 2026 · metrics 2.10.0
—
ceph/ceph-container
Docker files and images to run Ceph in containers
No licenseJul 19, 2026 · metrics 2.10.0
Packagist
php-http/discovery
Finds installed clients and message factories
MITAug 27, 2026 · metrics 2.10.0
RubyGems
guard/guard-rspec
Guard::RSpec automatically run your specs (much like autotest)
MITJul 22, 2026 · metrics 2.10.0
PyPI
wemake-services/django-modern-rest
Modern REST framework for Django with types and async support!
MITJul 31, 2026 · metrics 2.10.0
Go
deckhouse/deckhouse
Kubernetes platform from Flant
Custom licenseJul 20, 2026 · metrics 2.10.0
Packagist
php-http/message
HTTP Message related tools
MITAug 27, 2026 · metrics 2.10.0
npm
caiiiycuk/js-dos
The best API for running dos programs in browser
No licenseAug 5, 2026 · metrics 2.10.0
PyPI
googlearchive/PyDrive
Google Drive API Python wrapper library
Custom licenseAug 13, 2026 · metrics 2.10.0
Maven
spinnaker/kayenta
Automated Canary Service
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
ghost1372/HandyControls
Contains some simple and commonly used WPF controls based on HandyControl
MITSep 7, 2026 · metrics 2.10.0
RubyGems
samg/diffy
Easy Diffing in Ruby
MITJul 22, 2026 · metrics 2.10.0
RubyGems
square/cane
Code quality threshold checking as part of your build
Custom licenseJul 28, 2026 · metrics 2.10.0
npm
YuzuJS/setImmediate
A cross-browser implementation of the new setImmediate API.
MITAug 13, 2026 · metrics 2.10.0
npm
isaacs/node-graceful-fs
fs with incremental backoff on EMFILE
BlueOak-1.0.0Aug 4, 2026 · metrics 2.10.0
npm
gulpjs/vinyl
Virtual file format.
MITAug 13, 2026 · metrics 2.10.0
PyPI
pahaz/sshtunnel
SSH tunnels to remote server.
MITAug 27, 2026 · metrics 2.10.0
npm
vercel/arg
Simple argument parsing
MITAug 4, 2026 · metrics 2.10.0
npm
felixge/node-dateformat
A node.js package for Steven Levithan's excellent dateFormat() function.
MITAug 13, 2026 · metrics 2.10.0
Packagist · npm
moonshine-software/moonshine
Laravel Admin panel and more. Simple for beginners and powerful for experts. Using Blade, Alpine.js and Tailwind CSS.
MITJul 26, 2026 · metrics 2.10.0
PyPI
nicodv/kmodes
Python implementations of the k-modes and k-prototypes clustering algorithms, for clustering categorical data
MITAug 13, 2026 · metrics 2.10.0
npm · Maven
SonarSource/SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
Custom licenseSep 9, 2026 · metrics 2.10.0
RubyGems
fazibear/colorize
Ruby string class extension. It add some methods to set color, background color and text effect on console easier using ANSI escape sequences.
GPL-2.0Jul 22, 2026 · metrics 2.10.0
PyPI
koalalorenzo/python-digitalocean
🐍🐳 Python module to manage Digital Ocean droplets
LGPL-3.0Aug 8, 2026 · metrics 2.10.0