Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,489
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
download-maven-plugin/download-maven-plugin
These are a few plugins to help maven user to download different files on different protocol in part of maven build.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
endpoints/endpoints
a hypermedia API framework for javascript.
MITSep 18, 2026 · metrics 2.10.0
Go
pavlo-v-chernykh/keystore-go
A Go (golang) implementation of Java KeyStore encoder/decoder
MITOct 24, 2026 · metrics 2.10.0
NuGet
samcragg/sharpkml
SharpKML is an implementation of the Open Geospatial Consortium (OGC) KML 2.2 standard developed in C#, able to read/write both KML files and KMZ files.
MITSep 11, 2026 · metrics 2.10.0
npm
sindresorhus/environment
Check which JavaScript environment your code is running in at runtime: browser, Node.js, Bun, etc
MITSep 16, 2026 · metrics 2.10.0
Packagist
yiisoft/validator
Yii validator library
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
NuGet
4RTools/4RTools
Autopot, Skill Spammer, Dancer Macro and more
MITSep 17, 2026 · metrics 2.10.0
npm
empirical-run/empirical
Test and evaluate LLMs and model configurations, across all the scenarios that matter for your application
MITOct 22, 2026 · metrics 2.10.0
npm
gkz/optionator
JavaScript option parsing and help generation library
MITSep 16, 2026 · metrics 2.10.0
RubyGems
jmespath/jmespath.rb
Ruby implementation of JMESPath
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
kentcdodds/rtl-css-js
RTL for CSS in JS
MITOct 19, 2026 · metrics 2.10.0
npm
metafizzy/outlayer
:construction_worker: the brains & guts of a layout library
No licenseOct 24, 2026 · metrics 2.10.0
RubyGems
rdp/os
The OS gem allows for some easy telling if you’re on windows or not. OS.windows? as well as some other helper utilities
MITSep 12, 2026 · metrics 2.10.0
Go
sabhiram/go-gitignore
A gitignore parser for go
MITOct 21, 2026 · metrics 2.10.0
Packagist
clue/commander
Finally a sane way to register available commands and arguments and match your command line in PHP
MITSep 13, 2026 · metrics 2.10.0
Packagist
cybercog/laravel-clickhouse
Laravel ClickHouse adds CH client integration, generation & execution of ClickHouse database migrations to the Laravel application.
MITSep 13, 2026 · metrics 2.10.0
—
gluster/glusterd2
[DEPRECATED] Glusterd2 is the distributed management framework to be used for GlusterFS.
GPL-2.0Oct 4, 2026 · metrics 2.10.0
Packagist
miloschuman/yii2-highcharts
Highcharts widget for Yii 2 Framework
MITSep 19, 2026 · metrics 2.10.0
RubyGems
Codaisseur/terminal-notifier-guard
Mac OS X User Notifications for Guard
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
blokkli/editor
Interactive page editor for Nuxt 3
MITOct 23, 2026 · metrics 2.10.0
—
dash-project/dash
DASH, the C++ Template Library for Distributed Data Structures with Support for Hierarchical Locality for HPC and Data-Driven Science
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
gnosis/gp-v2-contracts
Smart contracts for the Gnosis Protocol v2
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
liuquanhao/moyu
墨鱼探针
No licenseOct 25, 2026 · metrics 2.10.0
Go · npm
luminescq/PWDTT
Десктопный VPN-клиент, который туннелирует трафик через TURN-серверы VK, маскируя соединение под зашифрованный медиатрафик звонка.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
microsoft/powerbi-client-angular
Power BI Angular component. This library lets you embed Power BI report, dashboard, dashboard tile, report visual, or Q&A in your Angular application.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
RocketChat/fuselage
React port of Rocket.Chat's design system, Fuselage
MITOct 22, 2026 · metrics 2.10.0
Go
Wissance/stringFormatter
A set of tools to manipulate text, i.e. making text from templates in C#/Python way is faster than fmt.Sprintf
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
hotforfeature/origami
Angular + Polymer
MITSep 12, 2026 · metrics 2.10.0
npm
AriaMinaei/RenderKid
Stylish console.log for node
MITSep 15, 2026 · metrics 2.10.0
npm · PyPI
Aurorastation/Aurora.3
The code for Aurorastation's new base, forked from Baystation12.
AGPL-3.0Sep 12, 2026 · metrics 2.10.0