Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,490
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
txix-open/etp
Event transport protocol - alternative to socket.io
MITSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/definitions
The package provides definition syntax. Definition is describing a way to create and configure a service or an object.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/test-support
No repository description published.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
Duzopy/VRChat-Crasher
VRChat Crasher
No licenseSep 16, 2026 · metrics 2.10.0
npm
IPeCompany/SmsPanelV2.TypeScript
TypeScript Package
MITSep 18, 2026 · metrics 2.10.0
npm
avto-dev/bank-card-vue-component
Vue.js component with bank card
MITSep 12, 2026 · metrics 2.10.0
npm
diplodoc-platform/components
No repository description published.
MITSep 13, 2026 · metrics 2.10.0
crates.io
estin/geosuggest
suggest by name or find nearest by coordinates cities
MITSep 17, 2026 · metrics 2.10.0
Go
grafana/xk6-ssh
Client extension for interacting with a host over SSH as part of your k6 test.
Apache-2.0Sep 26, 2026 · metrics 2.10.0
Go
green-api/whatsapp-api-client-golang
Create a golang application with WhatsApp API
Custom licenseSep 12, 2026 · metrics 2.10.0
Hex
kortirso/chess
Elixir package for playing chess
No licenseSep 16, 2026 · metrics 2.10.0
npm
masihgh/iranian-bank-list-js
A Javascript library to identify Iranian banks based on card numbers (first 6 digits) and IBANs. It also includes utility functions to validate card numbers and IBANs using standard algorithms.
MITOct 18, 2026 · metrics 2.10.0
Packagist
oroinc/customer-portal
OroCommerce package with customer portal and non authenticated visitor website base features.
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
roadrunner-php/centrifugo
🔌 RoadRunner Centrifugo Bridge
MITSep 14, 2026 · metrics 2.10.0
Packagist
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
MITOct 20, 2026 · metrics 2.10.0
Go
txix-open/isp-kit
No repository description published.
MITOct 21, 2026 · metrics 2.10.0
Packagist
yiisoft/data-db
Database adapter for data interfaces
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Packagist
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
1inch/limit-order-sdk
No repository description published.
No licenseSep 13, 2026 · metrics 2.10.0
Go
DangeL187/erax
Fancy errors tracing
MITSep 29, 2026 · metrics 2.10.0
npm
PeculiarVentures/ByteStream.js
ByteStream.js is a set of classes manipulating bytes and bits with optimized for speed perfomance
Custom licenseSep 15, 2026 · metrics 2.10.0
PyPI
Percona-Lab/pmm-submodules
A repo dedicated to building Percona Monitoring and Management (PMM)
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
SberBusiness/triplex-next
No repository description published.
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
Tellarion/webmaxsocket
webmaxsocket
No licenseSep 18, 2026 · metrics 2.10.0
npm
bad4iz/crypto-pro-cadesplugin
JavaScript-библиотека для работы с сертификатами и создания электронной подписи через «КриптоПро ЭЦП Browser plug-in».
MITSep 19, 2026 · metrics 2.10.0
Hex
balance-platform/ex_unit_summary
"Extension" for ExUnit
No licenseSep 12, 2026 · metrics 2.10.0
crates.io
broxus/tycho-types
A set of primitive types and utilities for the Tycho node
Apache-2.0Oct 10, 2026 · metrics 2.10.0
npm
diegomura/media-engine
Media queries engine written in pure JS!
No licenseSep 18, 2026 · metrics 2.10.0
npm
dy/hyperf
Hypertext fragment builder
No licenseSep 20, 2026 · metrics 2.10.0
npm
dy/tst
Tests without efforts
Custom licenseSep 14, 2026 · metrics 2.10.0