Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,618
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
Laravel-Lang/json-fallback
Adds support for fallback JSON string translation
MITSep 12, 2026 · metrics 2.10.0
npm · crates.io
VKCOM/swc-plugin-css-modules
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
—
dapi/memory-bank
Version-controlled context, governance, and delivery flows for coding agents.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
kamune-org/kamune
Communication over untrusted networks
MITSep 10, 2026 · metrics 2.10.0
npm
script-heads/stage-ui
Flexible UI Framework declared by your own Design System
MITOct 22, 2026 · metrics 2.10.0
npm
webpack/html-minimizer-webpack-plugin
HTML minimizer webpack plugin
MITOct 25, 2026 · metrics 2.10.0
NuGet
JeremyVm/QuestPDF.HTML
HTMLToQPDF is an extension for QuestPDF that allows to generate PDF from HTML
MITOct 21, 2026 · metrics 2.10.0
Packagist · npm
pavloniym/nova-action-buttons
This package allows you to execute an action directly on your resource table view.
MITOct 8, 2026 · metrics 2.10.0
Go
quasilyte/regex
Regular expression libraries for Go
MITOct 21, 2026 · metrics 2.10.0
Go
txix-open/etp
Event transport protocol - alternative to socket.io
MITSep 12, 2026 · metrics 2.10.0
npm
webpack/json-minimizer-webpack-plugin
JSON minimizer webpack plugin
MITOct 25, 2026 · metrics 2.10.0
Packagist
yiisoft/definitions
The package provides definition syntax. Definition is describing a way to create and configure a service or an object.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/test-support
No repository description published.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
Duzopy/VRChat-Crasher
VRChat Crasher
No licenseSep 16, 2026 · metrics 2.10.0
npm
IPeCompany/SmsPanelV2.TypeScript
TypeScript Package
MITSep 18, 2026 · metrics 2.10.0
npm
avto-dev/bank-card-vue-component
Vue.js component with bank card
MITSep 12, 2026 · metrics 2.10.0
npm
diplodoc-platform/components
No repository description published.
MITSep 13, 2026 · metrics 2.10.0
crates.io
estin/geosuggest
suggest by name or find nearest by coordinates cities
MITSep 17, 2026 · metrics 2.10.0
Go
grafana/xk6-ssh
Client extension for interacting with a host over SSH as part of your k6 test.
Apache-2.0Sep 26, 2026 · metrics 2.10.0
Go
green-api/whatsapp-api-client-golang
Create a golang application with WhatsApp API
Custom licenseSep 12, 2026 · metrics 2.10.0
Hex
kortirso/chess
Elixir package for playing chess
No licenseSep 16, 2026 · metrics 2.10.0
npm
masihgh/iranian-bank-list-js
A Javascript library to identify Iranian banks based on card numbers (first 6 digits) and IBANs. It also includes utility functions to validate card numbers and IBANs using standard algorithms.
MITOct 18, 2026 · metrics 2.10.0
Packagist
oroinc/customer-portal
OroCommerce package with customer portal and non authenticated visitor website base features.
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
roadrunner-php/centrifugo
🔌 RoadRunner Centrifugo Bridge
MITSep 14, 2026 · metrics 2.10.0
Packagist
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
MITOct 20, 2026 · metrics 2.10.0
Go
txix-open/isp-kit
No repository description published.
MITOct 21, 2026 · metrics 2.10.0
Packagist
yiisoft/data-db
Database adapter for data interfaces
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Packagist
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
1inch/limit-order-sdk
No repository description published.
No licenseSep 13, 2026 · metrics 2.10.0
Go
DangeL187/erax
Fancy errors tracing
MITSep 29, 2026 · metrics 2.10.0