Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,560
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven · RubyGems
LucasGGamerM/moshidon
Better modification of the official Mastodon for Android app
GPL-3.0Jul 23, 2026 · metrics 2.10.0
RubyGems
yabeda-rb/yabeda
Extendable framework for collecting and exporting metrics from your Ruby application
MITAug 22, 2026 · metrics 2.10.0
crates.io
RustCrypto/AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
No licenseAug 6, 2026 · metrics 2.10.0
Packagist
shetabit/payment
simple laravel payment package , supports multiple drivers
MITJul 31, 2026 · metrics 2.10.0
PyPI · npm
djlint/djLint
HTML template formatter and linter for Django, Jinja, Twig, Nunjucks, Handlebars, Liquid, Go templates, Mustache, Tera, Askama and Angular. Formats markup and template syntax together, and lints for accessibility, correctness and style. CLI, pre-commit hook and VS Code extension.
GPL-3.0Aug 27, 2026 · metrics 2.10.0
Maven · Go · npm
operator-framework/java-operator-sdk
Java SDK for building Kubernetes Operators
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
Adamant-im/adamant
ADAMANT Blockchain Node
GPL-3.0Aug 4, 2026 · metrics 2.10.0
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITAug 4, 2026 · metrics 2.10.0
crates.io
RustCrypto/password-hashes
Password hashing functions / KDFs
No licenseAug 11, 2026 · metrics 2.10.0
Go
quasilyte/go-ruleguard
Define and run pattern-based custom linting rules.
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
Go
flyingmutant/rapid
Rapid is a modern Go property-based testing library
MPL-2.0Aug 29, 2026 · metrics 2.10.0
—
MyraUI/Myra
UI Library for MonoGame, FNA and Stride
MITJul 21, 2026 · metrics 2.10.0
npm
epam/ketcher
Web-based molecule sketcher
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
ikvk/imap_tools
Work with email by IMAP
Apache-2.0Aug 6, 2026 · metrics 2.10.0
—
MyGUI/mygui
Fast, flexible and simple GUI.
Custom licenseJul 20, 2026 · metrics 2.10.0
npm
gemini-testing/testplane
Testplane (ex-hermione) browser test runner based on mocha and wdio
MITJul 23, 2026 · metrics 2.10.0
NuGet
DevTeam/Pure.DI
Pure DI for .NET
MITJul 20, 2026 · metrics 2.10.0
PyPI
Xilinx-CNS/onload
OpenOnload high performance user-level network stack
Custom licenseJul 26, 2026 · metrics 2.10.0
npm
browserslist/update-db
CLI tool to update caniuse-lite to refresh target browsers from Browserslist config
MITAug 4, 2026 · metrics 2.10.0
Packagist
JBZoo/Utils
Collection of useful PHP functions, mini-classes, and snippets for every day.
MITJul 20, 2026 · metrics 2.10.0
Packagist
defstudio/telegraph
Telegraph is a Laravel package for fluently interacting with Telegram Bots
MITJul 20, 2026 · metrics 2.10.0
npm
tabrindle/envinfo
Generate a report about your development environment for debugging and issue reporting
MITAug 29, 2026 · metrics 2.10.0
Go
lesovsky/noisia
Harmful workload generator for PostgreSQL
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
RubyGems
Envek/after_commit_everywhere
Use ActiveRecord transactional callbacks outside of models, literally everywhere in your application.
MITJul 20, 2026 · metrics 2.10.0
crates.io
RustCrypto/block-ciphers
Collection of block cipher algorithms written in pure Rust
No licenseAug 27, 2026 · metrics 2.10.0
npm
iNavFlight/inav-configurator
No repository description published.
GPL-3.0Aug 1, 2026 · metrics 2.10.0
crates.io
RustCrypto/traits
Collection of cryptography-related traits
No licenseAug 4, 2026 · metrics 2.10.0
PyPI · npm
mindsdb/anton
self-improving agent
MITAug 21, 2026 · metrics 2.10.0
RubyGems
DmitryTsepelev/ar_lazy_preload
Lazy loading associations for the ActiveRecord models
MITJul 20, 2026 · metrics 2.10.0
RubyGems · npm
rmagick/rmagick
Ruby bindings for ImageMagick
MITJul 20, 2026 · metrics 2.10.0