Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,348
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
epam/ketcher
Web-based molecule sketcher
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
quasilyte/go-ruleguard
Define and run pattern-based custom linting rules.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
—
MyraUI/Myra
UI Library for MonoGame, FNA and Stride
MITSep 12, 2026 · metrics 2.10.0
npm
wp-statistics/GeoLite2-City
Free MaxMind GeoLite2-City database for IP geolocation. Auto-updated, served via jsDelivr CDN. No API keys required.
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
smi2/phpClickHouse
php ClickHouse wrapper
MITSep 24, 2026 · metrics 2.10.0
PyPI
yukinarit/pyserde
Yet another serialization library on top of dataclasses, inspired by serde-rs.
MITSep 20, 2026 · metrics 2.10.0
NuGet
DevTeam/Pure.DI
Pure DI for .NET
MITSep 12, 2026 · metrics 2.10.0
PyPI
ikvk/imap_tools
Work with email by IMAP
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
MyGUI/mygui
Fast, flexible and simple GUI.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
browserslist/update-db
CLI tool to update caniuse-lite to refresh target browsers from Browserslist config
MITSep 16, 2026 · metrics 2.10.0
PyPI
Xilinx-CNS/onload
OpenOnload high performance user-level network stack
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
gemini-testing/testplane
Testplane (ex-hermione) browser test runner based on mocha and wdio
MITSep 13, 2026 · metrics 2.10.0
npm
gemini-testing/looks-same
Node.js library for comparing images
MITSep 29, 2026 · metrics 2.10.0
Packagist
defstudio/telegraph
Telegraph is a Laravel package for fluently interacting with Telegram Bots
MITSep 12, 2026 · metrics 2.10.0
Hex
elixir-waffle/waffle
Flexible file upload and attachment library for Elixir
No licenseOct 25, 2026 · metrics 2.10.0
Packagist
JBZoo/Utils
Collection of useful PHP functions, mini-classes, and snippets for every day.
MITSep 12, 2026 · metrics 2.10.0
npm · Go
vshulcz/deja-vu
One memory shared by Claude Code, Codex, Cursor, Copilot CLI, OpenClaw and 20 more coding agents, built from the session history already on disk. A fix found in one agent comes back in any of them, including months of sessions from before you installed it. No LLM, no embeddings, one local Go binary.
MITSep 12, 2026 · metrics 2.10.0
Go
lesovsky/noisia
Harmful workload generator for PostgreSQL
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
RubyGems
Envek/after_commit_everywhere
Use ActiveRecord transactional callbacks outside of models, literally everywhere in your application.
MITSep 11, 2026 · metrics 2.10.0
crates.io
RustCrypto/block-ciphers
Collection of block cipher algorithms written in pure Rust
No licenseOct 23, 2026 · metrics 2.10.0
PyPI
Cyberdrop-DL/cyberdrop-dl
Bulk asynchronous downloader for multiple file hosts
GPL-3.0Oct 17, 2026 · metrics 2.10.0
PyPI · npm
mindsdb/anton
self-improving agent
MITOct 19, 2026 · metrics 2.10.0
crates.io
RustCrypto/traits
Collection of cryptography-related traits
No licenseSep 16, 2026 · metrics 2.10.0
RubyGems
DmitryTsepelev/ar_lazy_preload
Lazy loading associations for the ActiveRecord models
MITSep 11, 2026 · metrics 2.10.0
PyPI
ispras/dedoc
Dedoc is a library (service) for automate documents parsing and bringing to a uniform format. It automatically extracts content, logical structure, tables, and meta information from textual electronic documents. (Parse document; Document content extraction; Logical structure extraction; PDF parser; Scanned document parser; DOCX parser; HTML parser
Apache-2.0Oct 19, 2026 · metrics 2.10.0
RubyGems · npm
rmagick/rmagick
Ruby bindings for ImageMagick
MITSep 11, 2026 · metrics 2.10.0
Maven
odnoklassniki/one-nio
Unconventional I/O library for Java
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
intel/intel-graphics-compiler
No repository description published.
Custom licenseSep 12, 2026 · metrics 2.10.0
Maven
SciProgCentre/kmath
Kotlin mathematics extensions library
Custom licenseSep 13, 2026 · metrics 2.10.0
Packagist
niklasravnsborg/laravel-pdf
📄 Laravel PDF
No licenseOct 8, 2026 · metrics 2.10.0