Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,782
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITAug 31, 2026 · metrics 2.10.0
NuGet
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
Custom licenseAug 4, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-authclient
Yii 2 authclient extension.
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-redis
Yii 2 Redis extension.
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
Go
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
MITAug 2, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenDJ
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
Custom licenseJul 25, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-httpclient
Yii 2 HTTP client
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
PyPI · crates.io
awolverp/cachebox
The fastest memoizing and caching Python library written in Rust.
MITAug 27, 2026 · metrics 2.10.0
—
Baystation12/Baystation12
Baystation's flavor of Space Station 13
AGPL-3.0Jul 21, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-elasticsearch
Yii 2 Elasticsearch extension
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
Packagist
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
MITAug 22, 2026 · metrics 2.10.0
npm · Go
vshulcz/deja-vu
Your agents already solved this. deja finds it — retroactive search and MCP recall over the session logs your coding agents already wrote. Cross-agent, SSH-portable, one zero-dep binary, fully local.
MITJul 20, 2026 · metrics 2.10.0
PyPI
scrapy/w3lib
Python library of web-related functions
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
Packagist
temporalio/sdk-php
Temporal PHP SDK
MITAug 4, 2026 · metrics 2.10.0
—
ReactiveBayes/RxInfer.jl
Julia package for automated Bayesian inference on a factor graph with reactive message passing
MITJul 22, 2026 · metrics 2.10.0
—
micro-elements/MicroElements.Swashbuckle.FluentValidation
Use FluentValidation rules instead of ComponentModel attributes
MITJul 20, 2026 · metrics 2.10.0
NuGet
appium/dotnet-client
Extension to the official Selenium dotnet webdriver
Apache-2.0Jul 27, 2026 · metrics 2.10.0
Go
lamoda/gonkey
Gonkey - a testing automation tool
MITJul 21, 2026 · metrics 2.10.0
NuGet
AlexanderPro/WindowTextExtractor
WindowTextExtractor allows you to get a text from any window of an operating system including asterisk passwords
MITAug 4, 2026 · metrics 2.10.0
npm
feature-sliced/steiger
Universal file structure and project architecture linter
MITJul 20, 2026 · metrics 2.10.0
npm
colorjs/color-space
Open collection of color spaces
CC0-1.0Aug 27, 2026 · metrics 2.10.0
npm
nanostores/persistent
Smart store for Nano Stores state manager to keep data in localStorage
MITJul 27, 2026 · metrics 2.10.0
PyPI
aio-libs/aiosmtpd
A reimplementation of the Python stdlib smtpd.py based on asyncio.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
—
rabbitmq/rabbitmq-management
RabbitMQ Management UI and HTTP API
Custom licenseJul 26, 2026 · metrics 2.10.0
crates.io
RustCrypto/MACs
Message authentication code algorithms written in pure Rust
No licenseAug 8, 2026 · metrics 2.10.0
crates.io
gtk-rs/gtk-rs-core
Rust bindings for GNOME libraries
MITAug 13, 2026 · metrics 2.10.0
crates.io
bytecodealliance/wasi-rs
WASI bindings for Rust
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet
FontStashSharp/FontStashSharp
C# port of https://github.com/memononen/fontstash
ZlibAug 24, 2026 · metrics 2.10.0
Packagist
phpspec/php-diff
A comprehensive library for generating differences between two strings in multiple formats (unified, side by side HTML etc). Based on the difflib implementation in Python
No licenseAug 13, 2026 · metrics 2.10.0