Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,528
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
phplrt/position
[READ ONLY] Subtree split of the phplrt position component (see phplrt/phplrt)
MITAug 23, 2026 · metrics 2.10.0
Packagist
phplrt/position-contracts
[READ ONLY] Subtree split of the phplrt position contracts component (see phplrt/phplrt)
MITAug 23, 2026 · metrics 2.10.0
—
phplrt/source
[READ ONLY] Subtree split of the phplrt source component (see phplrt/phplrt)
No licenseJul 24, 2026 · metrics 2.10.0
—
phplrt/source-contracts
[READ ONLY] Subtree split of the phplrt source contracts component (see phplrt/phplrt)
No licenseJul 24, 2026 · metrics 2.10.0
Maven · Go · npm +2
pittengermdp/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
Apache-2.0Aug 2, 2026 · metrics 2.10.0
npm
plesk/eslint-config
ESLint configuration for Plesk projects
No licenseJul 29, 2026 · metrics 2.10.0
npm
poooi/plugin-translator
Translate package into English
MITJul 25, 2026 · metrics 2.10.0
Go
postal-tg/max-bot-api-client-go
No repository description published.
No licenseJul 23, 2026 · metrics 2.10.0
npm
processengine/nominal-beneficiaries-rules
No repository description published.
No licenseAug 5, 2026 · metrics 2.10.0
crates.io · npm
pyth-network/pyth-lazer-public
Pyth Pro SDKs and apps
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Packagist
rasuvaeff/property-testing
Property-based testing for PHP as a Testo plugin: random generators, shrinking to minimal counterexamples, reproducible seeds
BSD-3-ClauseJul 25, 2026 · metrics 2.10.0
Packagist · npm
rasuvaeff/property-testing-core
Framework-agnostic property-based testing engine: generators, shrinking, runner, regression corpus, events
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Packagist
rasuvaeff/rector-named-literals
Rector rule that adds parameter names to literal arguments (bool by default, numeric/string opt-in)
BSD-3-ClauseAug 15, 2026 · metrics 2.10.0
Packagist · npm
rasuvaeff/understudy
Test double library for PHP with a call-closure API (work in progress)
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
Go
reddawnairsoft/api-proto
No repository description published.
No licenseJul 25, 2026 · metrics 2.10.0
Go
rest-mail/go-smtp
📤 An SMTP library for Go clients and servers
MITAug 15, 2026 · metrics 2.10.0
Go
rezect/ttl-cache-server
REST API cache service + GitHub client with retry/rate limiting
No licenseJul 21, 2026 · metrics 2.10.0
Go
rhobs/obo-prometheus
The Prometheus monitoring system and time series database.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
robintibor/moabb
Mother of All BCI Benchmarks
BSD-3-ClauseJul 26, 2026 · metrics 2.10.0
npm
rosen-bridge/network-client
No repository description published.
MITJul 31, 2026 · metrics 2.10.0
Go
rp1s/lipa
Render html window tree
MITJul 22, 2026 · metrics 2.10.0
Go
rus-lan/bogoslavAnalytics
No repository description published.
No licenseJul 19, 2026 · metrics 2.10.0
Go
rus-lan/multiApps
No repository description published.
No licenseJul 20, 2026 · metrics 2.10.0
Go
sanchpet/sweb
CLI for the SpaceWeb (sweb.ru) hosting API — kubectl/yc-style, on sweb-go-sdk
MITJul 20, 2026 · metrics 2.10.0
Go
sanchpet/sweb-go-sdk
Go client for the SpaceWeb (sweb.ru) hosting API (JSON-RPC 2.0)
MITJul 20, 2026 · metrics 2.10.0
Go
selectel/dedicated-go
Go SDK for Selectel Dedicated Servers
Apache-2.0Aug 15, 2026 · metrics 2.10.0
PyPI
seruva19/ayase
Modular media quality metrics toolkit.
MITJul 23, 2026 · metrics 2.10.0
Go
sinashahoveisi/resilium
Composable resilience policies for Go — retry, circuit breaker, timeout, and rate limiting behind a single type-safe API.
MITAug 22, 2026 · metrics 2.10.0
Go
sinashahoveisi/typecfg
Type-safe Go config loader with generics, hot reload, and precise field-level errors — no reflection-heavy dependencies like viper.
MITJul 20, 2026 · metrics 2.10.0
Go
sirkon/msgpunsafe
Unsafe routines for msgpack decoding.
MITJul 27, 2026 · metrics 2.10.0