Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,064
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
3rd-Eden/enabled
Check if a certain flag is enabled.
MITSep 23, 2026 · metrics 2.10.0
Go
Lemon4ksan/aoni
❄️ Ultra-fast unified internet protocol stack for Go
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go · RubyGems
MimoJanra/confkit
Typed, validated configuration loading for Go — no more stringly-typed config, boilerplate, or cryptic error messages.
MITSep 19, 2026 · metrics 2.10.0
npm · Maven
Phil0xFF/capacitor-jailbreak-root-detection
Jailbreak Root detection plugin for capacitor.
No licenseSep 18, 2026 · metrics 2.10.0
npm
RunDevelopment/regexp-ast-analysis
A library for analysing JS RegExp
MITSep 23, 2026 · metrics 2.10.0
Go
TrilliumIT/vxrouter
A vxlan networking and ipam plugin for docker clusters.
MITSep 19, 2026 · metrics 2.10.0
npm
binance/binance-toolbox-typescript
Toolbox for typescript connector
MITSep 20, 2026 · metrics 2.10.0
crates.io
bluss/rawpointer
Extra methods for raw pointers
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
frostyard/plow
debian package repository manager, 100% serverless with GH Actions and Pages
No licenseSep 19, 2026 · metrics 2.10.0
npm
imranbarbhuiya/eslint-config-mahir
My opinionated eslint config
MITSep 18, 2026 · metrics 2.10.0
crates.io
ncatelli/parcel
A small zero-dependency parser-combinator library for rust.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io · npm
ncatelli/scrap
A minimal command-line utility framework built with zero external dependencies
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Packagist
pear/Structures_Graph
Graph datastructure manipulation library
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go · PyPI
replicate/cog-runtime
Cog runtime implementation
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
returnearly/laravel-enums
A package to generate PHP 8.1 Enums, and adds Laravel Collection helpers around them.
MITSep 16, 2026 · metrics 2.10.0
crates.io · npm
risingwavelabs/rw-diagnose-tools
Toolset for diagnosing Risingwave clusters.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
weaveworks/policy-library
The policy-as-code library
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
MITSep 20, 2026 · metrics 2.10.0
crates.io
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
AndroidPoet/revenuecat-cli
Fast, lightweight, and scriptable CLI for RevenueCat
MITSep 17, 2026 · metrics 2.10.0
Hex
BrandtHill/Salchicha
An Elixir NaCl/libsodium-lite Salsa20/ChaCha20 encryption tool
MITSep 18, 2026 · metrics 2.10.0
—
EngoEngine/math
Fork of luxengine/math which is now moved
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
—
NDari/gocrunch
High performance numeric library in Go
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
NextPKI/certscan
Auto-discovery agent for TLS certificates. Scans your local IPv4/IPv6 network and static hosts for HTTPS, SMTPS, IMAPS, and more. Reports certificate metadata via Webhook. Supports TLS, STARTTLS, SNI, and protocol tagging. You can't protect what you don't know you have.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
NuGet
Vantiv/cnp-sdk-for-dotnet
.NET SDK to ease XML integrations with the Vantiv eCommerce platform
Custom licenseSep 21, 2026 · metrics 2.10.0
—
arilamstein/choroplethrCaCensusTract
Shapefile, metadata and visualization functions for US Census Tracts in California
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
astroport-fi/terra-plus
Production Quality contracts under open source licenses
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
Packagist
barryvdh/laravel
A PHP Framework For Web Artisans
No licenseSep 19, 2026 · metrics 2.10.0
npm
bigeasy/delta
URL routing for the browser and Node.js.
MITSep 20, 2026 · metrics 2.10.0
—
bower-media-samples/big-buck-bunny-1080p-30s
30 first seconds of Big Buck Bunny (1080p)
No licenseSep 20, 2026 · metrics 2.10.0