Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,526
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
rrrene/sparkr
▁▂▃▅▂▇ in Ruby (and your shell)
MITSep 11, 2026 · metrics 2.10.0
Go · npm · PyPI
Dan6erbond/share-me
An image and video hosting platform for your server, with rich embed support and API.
MITOct 20, 2026 · metrics 2.10.0
PyPI
d5h-foss/grpc-interceptor
Simplified Python gRPC interceptors
MITOct 23, 2026 · metrics 2.10.0
npm
egoist/joycon
Find and load config files with joy.
MITSep 15, 2026 · metrics 2.10.0
PyPI
elemental-lf/benji
Benji Backup: A block based deduplicating backup software for Ceph RBD images, iSCSI targets, image files and block devices
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
fitzgen/glob-to-regexp
Convert a glob to a regular expression
No licenseSep 16, 2026 · metrics 2.10.0
Go
ovh/go-ovh
Simple go wrapper for the OVH API
BSD-3-ClauseOct 25, 2026 · metrics 2.10.0
Packagist · npm
spiritix/php-chrome-html2pdf
A PHP library for converting HTML to PDF using Google Chrome
MITSep 14, 2026 · metrics 2.10.0
Go
srwiley/rasterx
Rasterx is an SVG 2.0 path compliant rasterizer that can use either scany, the golang vector or a derivative of the freetype anti-aliaser.
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
PyPI
google/python_portpicker
A module to find available network ports for testing.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs-click
An MkDocs extension to generate documentation for Click command line applications
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
mother/react-files
A file input (dropzone) management component for React
MITOct 18, 2026 · metrics 2.10.0
NuGet
serilog-contrib/Serilog.Enrichers.Sensitive
A Serilog LogEvent enricher that masks sensitive data
MITSep 11, 2026 · metrics 2.10.0
RubyGems
svoop/autotest-growl
Next generation Growl support for autotest.
MITSep 12, 2026 · metrics 2.10.0
crates.io
thomcc/arcstr
Better reference counted strings for Rust
Apache-2.0Sep 25, 2026 · metrics 2.10.0
Packagist · npm
valu-digital/wp-graphql-polylang
WPGraphQL Polylang Extension for WordPress
GPL-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
siebertm/parse-cron
parses cron expressions and calculates the next occurence after a given date
MITSep 11, 2026 · metrics 2.10.0
npm
sindresorhus/untildify
Convert a tilde path to an absolute path: ~/dev => /Users/sindresorhus/dev
MITSep 15, 2026 · metrics 2.10.0
Hex
tompave/fun_with_flags_ui
Web dashboard for the FunWithFlags Elixir package
MITOct 25, 2026 · metrics 2.10.0
Packagist
wamania/php-stemmer
Native PHP Stemmer
MITSep 18, 2026 · metrics 2.10.0
PyPI
DeepRank/deeprank
This repository has been integrated in https://github.com/DeepRank/deeprank2
Apache-2.0Oct 26, 2026 · metrics 2.10.0
npm
ai/check-dts
Unit tests for TypeScript definitions in your JS open source library
MITSep 14, 2026 · metrics 2.10.0
—
elliotchance/phpserialize
📑 PHP serialize() and unserialize() for Go
MITSep 23, 2026 · metrics 2.10.0
npm
mathisonian/command-exists
node module to check if a command-line command exists
MITSep 23, 2026 · metrics 2.10.0
Packagist
tddwizard/magento2-fixtures
Fixture library for Magento 2 integration tests by @schmengler (@integer-net)
MITOct 22, 2026 · metrics 2.10.0
npm
editor-js/table
Table constructor for Editor.js
MITSep 18, 2026 · metrics 2.10.0
npm
mongodb-js/mongodb-schema
Infer a probabilistic schema for a MongoDB collection.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
svenkreiss/socialforce
Differentiable Social Force simulation with universal interaction potentials.
MITOct 21, 2026 · metrics 2.10.0
Maven
ww20081120/framework
java企业级底层框架，提供日志、缓存、DB访问、消息中间件、规则引擎、流程引擎、分布式事务便捷使用方法， 我们不重复造轮子，我们只是开源世界的搬运工。
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
Quantco/polarify
Simplifying conditional Polars Expressions with Python 🐍 🐻❄️
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0