Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,702
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · crates.io
bitcoinjs/tiny-secp256k1
A tiny secp256k1 native/JS wrapper
MITOct 17, 2026 · metrics 2.10.0
crates.io
japaric/syscall.rs
Raw system calls for Rust
Custom licenseSep 15, 2026 · metrics 2.10.0
—
urbit/arvo
No repository description published.
No licenseSep 12, 2026 · metrics 2.10.0
Packagist
aVadim483/fast-excel-reader
Lightweight and very fast XLSX Excel Spreadsheet and CSV Reader in PHP
MITOct 22, 2026 · metrics 2.10.0
RubyGems
chef-boneyard/chef-api
DEPRECATED: A tiny Chef API client with minimal dependencies
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
coveooss/tgf
A Terragrunt frontend that allow execution of Terragrunt/Terraform through Docker
MITSep 14, 2026 · metrics 2.10.0
PyPI
dask/partd
Concurrent appendable key-value storage
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
PyPI
dbt-labs/dbt-redshift
This repository has moved into https://github.com/dbt-labs/dbt-adapters
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
openxc/openxc-message-format
Specification for the OpenXC JSON message format
BSD-3-ClauseSep 29, 2026 · metrics 2.10.0
RubyGems
pages-themes/time-machine
Time machine is a Jekyll theme for GitHub Pages
CC0-1.0Sep 10, 2026 · metrics 2.10.0
Packagist
prismicio-community/php-kit
Community maintained development kit for Prismic and the PHP language
Custom licenseSep 14, 2026 · metrics 2.10.0
crates.io
RustCrypto/KDFs
Collection of Key Derivation Functions written in pure Rust
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
aresponses/aresponses
Asyncio http mocking. Similar to the responses library used for 'requests'
MITSep 14, 2026 · metrics 2.10.0
Go
emersion/go-sasl
🔑 A SASL library written in Go
MITSep 23, 2026 · metrics 2.10.0
PyPI
fcakyon/midv500
Download and convert MIDV-500 annotations to COCO instance segmentation format
MITSep 19, 2026 · metrics 2.10.0
npm
hipstersmoothie/obsidian-plugin-prettier
Format obsidian.md notes using prettier
No licenseSep 13, 2026 · metrics 2.10.0
PyPI
lkreidberg/batman
Fast transit light curves models in Python.
GPL-3.0Oct 22, 2026 · metrics 2.10.0
Hex
lpil/icalendar
🗓️ A small library for reading and writing ICalendar files.
MITOct 25, 2026 · metrics 2.10.0
—
n64decomp/qemu-irix
adding Irix (and, to a lesser extent, Solaris) userland emulation to QEMU
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
pyth-network/pyth-client-js
Javascript API for on-chain pyth account structure
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-regex
Tree-sitter parser for regular expressions
MITSep 15, 2026 · metrics 2.10.0
npm
wkillerud/some-sass
Language server with improved support for SCSS, Sass indented and SassDoc. Workspace awareness and full support for Sass modules.
No licenseSep 14, 2026 · metrics 2.10.0
Go · Maven
FrontierTM/Pantegnos
VPN decryption utility designed to parse, decrypt complex VPN and proxy configuration files
AGPL-3.0Oct 26, 2026 · metrics 2.10.0
RubyGems
apotonick/uber
Gem-authoring extensions for classes and modules.
MITSep 10, 2026 · metrics 2.10.0
Hex
balance-platform/pillar
Elixir library client for work with ClickHouse
No licenseSep 12, 2026 · metrics 2.10.0
npm
base-repos/base
Base is the foundation for creating modular, unit testable and highly pluggable, server-side node.js applications.
MITSep 15, 2026 · metrics 2.10.0
npm
browserify/stream-browserify
the stream module from node core for browsers
MITSep 15, 2026 · metrics 2.10.0
npm
cladd-ui/cladd
React UI kit for building actual apps.
MITOct 22, 2026 · metrics 2.10.0
npm
dawsbot/config-chain
Handle configuration once and for all
MITOct 20, 2026 · metrics 2.10.0
PyPI
kafka-python-ng/kafka-python-ng
Fork for Python client for Apache Kafka
Apache-2.0Sep 17, 2026 · metrics 2.10.0