Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,667
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist · npm
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
No licenseSep 13, 2026 · metrics 2.10.0
npm
consta-design-system/uikit
No repository description published.
MITSep 29, 2026 · metrics 2.10.0
Maven
yandex/yatagan
Dependency Injection framework based on Google's Dagger2 API, optimized for fast builds and for managing large graphs with optional dependencies
Apache-2.0Oct 22, 2026 · metrics 2.10.0
RubyGems
plaid/plaid-ruby
Ruby bindings for Plaid
MITSep 11, 2026 · metrics 2.10.0
Go
joomcode/redispipe
High-throughput Redis client for Go with implicit pipelining
MITSep 12, 2026 · metrics 2.10.0
RubyGems
DmitryTsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
MITSep 15, 2026 · metrics 2.10.0
RubyGems
chuckremes/ffi-rzmq
FFI bindings for ZeroMQ so the library can be used under JRuby and other FFI-compliant ruby runtimes
No licenseSep 12, 2026 · metrics 2.10.0
RubyGems
wallyqs/org-ruby
An Org mode parser written in Ruby.
No licenseOct 9, 2026 · metrics 2.10.0
PyPI
romis2012/aiohttp-socks
Proxy (HTTP, SOCKS) connector for aiohttp
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
TheDragonCode/laravel-deploy-operations
🚀 Performing any actions during the deployment process
MITSep 14, 2026 · metrics 2.10.0
Packagist
sajya/server
Implement the JSON-RPC 2.0 server specification for @Laravel
MITSep 12, 2026 · metrics 2.10.0
—
VisionVerse/Awesome-RGBT
RGB-T Fusion, RGB-T SOD, RGB-T Vehicle Detection, RGB-T Crowd Counting, RGB-T Pedestrian Detection, RGB-T Semantic Segmeantaion, RGB-T Tracking
MITSep 16, 2026 · metrics 2.10.0
Packagist
yiisoft/di
PSR-11 compatible DI container and injector
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist · npm
yiisoft/yii2-framework
[READ ONLY] Yii 2 framework core code only. This is a subtree split off the "yii2" repository
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go · npm
alchemmist/lazy-tmux
Lazy tmux it is a fast session manager and saver for tmux. You can save all your session and lazy restore it.
MITSep 17, 2026 · metrics 2.10.0
Packagist
neonxp/MathExecutor
Simple math expresions parser and calculator
MITSep 23, 2026 · metrics 2.10.0
—
scalameta/sbt-scalafmt
sbt plugin for Scalafmt
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
AlekSi/pointer
Go package pointer provides helpers to get pointers to values of built-in types.
MITSep 23, 2026 · metrics 2.10.0
—
VisionVerse/Blind-Motion-Deblurring-Survey
Deep learning in motion deblurring: current status, benchmarks and future prospects[J], The Visual Computer, 2024.
MITSep 16, 2026 · metrics 2.10.0
Maven
0x4f53/Wristkey
A free and open-source 2FA app for smartwatches.
MITSep 16, 2026 · metrics 2.10.0
crates.io
yury/cidre
Apple frameworks bindings for rust
MITSep 12, 2026 · metrics 2.10.0
Go · npm
twirapp/twir
Twitch chat bot written on Golang and TypeScript.
Custom licenseJul 20, 2026 · metrics 2.10.0
npm
wp-statistics/GeoLite2-Country
Free MaxMind GeoLite2-Country database for IP geolocation. Ultra-lightweight (~2MB), auto-updated via jsDelivr CDN.
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/publisher
Localization publisher for your Laravel application
MITSep 12, 2026 · metrics 2.10.0
PyPI · crates.io · npm
zmactep/patinae
A fast, programmable molecular viewer for research, scripting, and the web
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
Packagist
yiisoft/db
Yii Database Library
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-bootstrap4
Yii 2 Bootstrap 4 Extension
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Packagist
basis-company/nats.php
nats jetstream client for php
No licenseSep 14, 2026 · metrics 2.10.0
npm
bjyoungblood/es6-error
Easily-extendable error for use with ES6 classes
MITSep 15, 2026 · metrics 2.10.0
npm
audiojs/decode
Minimal audio decoders layer
MITOct 23, 2026 · metrics 2.10.0