Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,390
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
voronind/awesome-slugify
Python flexible slugify function
No licenseSep 14, 2026 · metrics 2.10.0
Packagist
php-http/curl-client
cURL client
MITSep 16, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITOct 21, 2026 · metrics 2.10.0
NuGet
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
EvgenyOrekhov/eslint-config-hardcore
The most strict (yet practical) ESLint config. 53 plugins. 1405 rules. React, Vue, Node, and pure JS/TS.
MITSep 30, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-authclient
Yii 2 authclient extension.
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Go
deckhouse/prompp
Deckhouse Prom++ – high-performance fork of Prometheus, designed to significantly reduce memory consumption
Custom licenseOct 18, 2026 · metrics 2.10.0
npm · PyPI
dy/wavefont
Typeface for rendering waveform/data
OFL-1.1Sep 19, 2026 · metrics 2.10.0
npm
Netflix-Skunkworks/stethoscope-app
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
MITSep 13, 2026 · metrics 2.10.0
npm
bem/bem-react
A set of tools for developing user interfaces using the BEM methodology in React
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
facebookincubator/infima
A UI framework that provides websites with the minimal CSS and JS needed to get started with building a modern responsive beautiful website
MITSep 23, 2026 · metrics 2.10.0
—
pwnnex/ByeByeVPN
Full TSPU/DPI/VPN detectability scanner. Scan any IP as a censor sees it.
GPL-3.0Oct 13, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-redis
Yii 2 Redis extension.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Packagist
mehdi-fathi/eloquent-filter
Eloquent Filter is a package for filter data of models by the query strings. Easy to use and fully dynamic.
MITOct 17, 2026 · metrics 2.10.0
Go
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
MITSep 16, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenDJ
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
Custom licenseSep 13, 2026 · metrics 2.10.0
npm · Maven
creevey/creevey
Cross-browser screenshot testing tool for Storybook with fancy UI Runner.
MITSep 15, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-httpclient
Yii 2 HTTP client
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI · crates.io
awolverp/cachebox
The fastest memoizing and caching Python library written in Rust.
MITAug 27, 2026 · metrics 2.10.0
Packagist
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
MITOct 20, 2026 · metrics 2.10.0
—
Baystation12/Baystation12
Baystation's flavor of Space Station 13
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-elasticsearch
Yii 2 Elasticsearch extension
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
feature-sliced/steiger
Universal file structure and project architecture linter
MITSep 12, 2026 · metrics 2.10.0
Packagist
temporalio/sdk-php
Temporal PHP SDK
MITSep 16, 2026 · metrics 2.10.0
PyPI
scrapy/w3lib
Python library of web-related functions
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
—
ReactiveBayes/RxInfer.jl
Julia package for automated Bayesian inference on a factor graph with reactive message passing
MITSep 12, 2026 · metrics 2.10.0
npm · Maven · RubyGems
matinzd/react-native-health-connect
React native library for health connect (Android only)
MITSep 15, 2026 · metrics 2.10.0
npm
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
Apache-2.0Sep 16, 2026 · metrics 2.10.0