Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,777
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
mche/Mojolicious-Plugin-RoutesAuthDBI
From DBI tables does generate app routes, make authentication and make restrict access (authorization) with roles/profiles.
No licenseAug 2, 2026 · metrics 2.10.0
—
monerium/sdk
JavaScript SDK for the Monerium API.
No licenseAug 15, 2026 · metrics 2.10.0
—
natural-transformation/spoonbill
A server-side single-page application framework for Scala — build reactive web apps with no JavaScript (formerly Korolev)
Apache-2.0Sep 4, 2026 · metrics 2.10.0
—
nextgis/cesium-terrain-builder
A C++ library and associated command line tools designed to create terrain tiles for use in the Cesium JavaScript library
Custom licenseAug 1, 2026 · metrics 2.10.0
npm
nibble-4bits/codewars-solutions-scraper
A scraper that gets the solutions of all of the CodeWars katas you have solved
GPL-3.0Jul 27, 2026 · metrics 2.10.0
npm
node-apn/node-http2
An HTTP/2 client and server implementation for node.js
MITAug 12, 2026 · metrics 2.10.0
Go · npm
okp4/tendermint
⟁ Tendermint Core (BFT Consensus) in Go
Custom licenseJul 27, 2026 · metrics 2.10.0
RubyGems
omnizip/excavate
Extract nested archives with a single command.
Custom licenseJul 24, 2026 · metrics 2.10.0
Go
opentable/go-singularity
Singularity API client
MITAug 23, 2026 · metrics 2.10.0
crates.io · PyPI
paiml/trueno-graph
MOVED → https://github.com/paiml/aprender (crates/aprender-graph)
MITAug 30, 2026 · metrics 2.10.0
crates.io
paiml/trueno-rag
MOVED → https://github.com/paiml/aprender (crates/aprender-rag)
MITAug 30, 2026 · metrics 2.10.0
—
pgaskin/cmus
Fork of cmus/cmus for development, packaging, and testing PRs. For Fedora packages, see pgaskin/rpms.
GPL-2.0Jul 25, 2026 · metrics 2.10.0
npm
phatnguyenuit/nhaccuatui-downloader
Simple CLI to download nhaccuatui songs includes playlists and songs
MITJul 26, 2026 · metrics 2.10.0
Packagist
phplrt/lexer
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
MITJul 24, 2026 · metrics 2.10.0
Packagist
phplrt/parser
[READ ONLY] Subtree split of the phplrt parser component (see phplrt/phplrt)
MITJul 24, 2026 · metrics 2.10.0
Go · npm
polymarket/s3x
s3x is a fork of minio providing an S3 API powered by TemporalX that uses IPFS as the data storage layer. It lets you turn any S3 application into an IPFS application with no change in application design
Apache-2.0Jul 15, 2026 · metrics 2.10.0
—
popbottoms/Authorities-Voice-Mail
No repository description published.
No licenseAug 2, 2026 · metrics 2.10.0
Go
rgst-io/stencil-golang
[MIGRATED] stencil template repository for Golang applications
GPL-3.0Aug 1, 2026 · metrics 2.10.0
PyPI
rhasspy/rhasspy-asr-vosk-hermes
MQTT service for speech to text with Vosk using Hermes protocol
MITJul 22, 2026 · metrics 2.10.0
npm
schmooky/pylinka
No repository description published.
MITAug 5, 2026 · metrics 2.10.0
Maven
siy/aether
No repository description published.
Custom licenseJul 25, 2026 · metrics 2.10.0
Packagist
smarty-php/smarty-phpunit
No repository description published.
No licenseJul 20, 2026 · metrics 2.10.0
npm
sparcs-kaist/react-grid-layout
react-grid-layout customization for usage in ZABO
MITSep 5, 2026 · metrics 2.10.0
Packagist
spiral/console
[READ ONLY] Console Core, Auto-Discovery, Command Sequencing. Subtree split of the Spiral Console component (see spiral/framework)
MITJul 28, 2026 · metrics 2.10.0
Packagist
spiral/http
[READ ONLY] PSR-15 HTTP Request pipeline. Subtree split of the Spiral HTTP component (see spiral/framework)
MITJul 28, 2026 · metrics 2.10.0
PyPI
ssst0n3/opdb
an opcode level debugger for python
Apache-2.0Sep 8, 2026 · metrics 2.10.0
npm
syntax-tree/estree-util-is-identifier-name
Check if something can be an ecmascript (javascript) identifier name
MITAug 29, 2026 · metrics 2.10.0
crates.io
tana/turtly-converter
No repository description published.
MPL-2.0Aug 23, 2026 · metrics 2.10.0
—
thibaultcha/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
No licenseJul 26, 2026 · metrics 2.10.0
npm
vLannaAi/noy-db
Zero-knowledge, offline-first, encrypted document store with pluggable backends and multi-user access control
MITSep 8, 2026 · metrics 2.10.0