Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,381
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
ton-connect/sdk
SDK for TON Connect 2.0 — a comprehensive communication protocol between wallets and apps in TON ecosystem
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
samdark/sitemap
Sitemap and sitemap index builder
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
vernette/warpscout
🛰️ Cloudflare WARP endpoint scanner - find working endpoints over wg/awg/masque and see the exit region and edge node they land on
MITOct 18, 2026 · metrics 2.10.0
Go
sethvargo/go-githubactions
Go SDK for GitHub Actions - easily author GitHub Actions in Go
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
nikepan/clickhouse-bulk
Collects many small inserts to ClickHouse and send in big inserts
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
flant/addon-operator
A system to manage additional components for Kubernetes cluster in a simple, consistent and automated way.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
roadrunner-php/laravel-bridge
Complete Laravel integration for RoadRunner with support for HTTP, Jobs, gRPC, and Temporal plugins - going beyond Octane's capabilities
MITSep 18, 2026 · metrics 2.10.0
Go
ozontech/file.d
A blazing fast tool for building data pipelines: read, process and output events. Our community: https://t.me/file_d_community
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
crates.io
gtk-rs/gtk3-rs
Rust bindings for GTK 3
MITSep 18, 2026 · metrics 2.10.0
NuGet
Taritsyn/WebMarkupMin
The Web Markup Minifier (abbreviated WebMarkupMin) - a .NET library that contains a set of markup minifiers. The objective of this project is to improve the performance of web applications by reducing the size of HTML, XHTML and XML code.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
necordjs/necord
🤖 A module for creating Discord bots using NestJS, based on Discord.js
MITOct 9, 2026 · metrics 2.10.0
NuGet
WildGums/Orchestra
Orchestra is a composable shell and WPF framework built on top of Catel
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
MrRefactoring/jira.js
Modern Jira REST API client for JavaScript & TypeScript — Jira Cloud API v2/v3, Agile & Service Desk. Type-safe, tree-shakable, works in Node.js and browsers (ESM/CJS).
MITSep 25, 2026 · metrics 2.10.0
crates.io
servo/euclid
Geometry primitives (basic linear algebra) for Rust
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
voronind/awesome-slugify
Python flexible slugify function
No licenseSep 14, 2026 · metrics 2.10.0
Packagist
php-http/curl-client
cURL client
MITSep 16, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITOct 21, 2026 · metrics 2.10.0
NuGet
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
EvgenyOrekhov/eslint-config-hardcore
The most strict (yet practical) ESLint config. 53 plugins. 1405 rules. React, Vue, Node, and pure JS/TS.
MITSep 30, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-authclient
Yii 2 authclient extension.
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Go
deckhouse/prompp
Deckhouse Prom++ – high-performance fork of Prometheus, designed to significantly reduce memory consumption
Custom licenseOct 18, 2026 · metrics 2.10.0
npm · PyPI
dy/wavefont
Typeface for rendering waveform/data
OFL-1.1Sep 19, 2026 · metrics 2.10.0
npm
bem/bem-react
A set of tools for developing user interfaces using the BEM methodology in React
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
facebookincubator/infima
A UI framework that provides websites with the minimal CSS and JS needed to get started with building a modern responsive beautiful website
MITSep 23, 2026 · metrics 2.10.0
—
pwnnex/ByeByeVPN
Full TSPU/DPI/VPN detectability scanner. Scan any IP as a censor sees it.
GPL-3.0Oct 13, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-redis
Yii 2 Redis extension.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Packagist
mehdi-fathi/eloquent-filter
Eloquent Filter is a package for filter data of models by the query strings. Easy to use and fully dynamic.
MITOct 17, 2026 · metrics 2.10.0
Go
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
MITSep 16, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenDJ
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
Custom licenseSep 13, 2026 · metrics 2.10.0