Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,707
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
ISCSep 16, 2026 · metrics 2.10.0
crates.io
queer/boxxy
boxxy puts bad Linux applications in a box with only their files.
MITOct 23, 2026 · metrics 2.10.0
Go
grafana-cold-storage/agent
Vendor-neutral programmable observability pipelines.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
gorilla/handlers
Package gorilla/handlers is a collection of useful middleware for Go HTTP services & web applications 🛃
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
PyPI
rspeer/wordfreq
Access a database of word frequencies, in various natural languages.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
tj/mmake
Modern Make
No licenseOct 19, 2026 · metrics 2.10.0
npm
rvagg/node-worker-farm
Distribute processing tasks to child processes with an über-simple API and baked-in durability & custom concurrency options.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
WebDevStudios/Custom-Metaboxes-and-Fields-for-WordPress
Lets you easily create metaboxes with custom fields that will blow your mind.
No licenseSep 13, 2026 · metrics 2.10.0
Go
mitchellh/cli
A Go library for implementing command-line interfaces.
MPL-2.0Oct 21, 2026 · metrics 2.10.0
npm
thecodrr/fdir
⚡ The fastest directory crawler & globbing library for NodeJS. Crawls 1m files in < 1s
MITSep 16, 2026 · metrics 2.10.0
npm
lukeed/klona
A tiny (240B to 501B) and fast utility to "deep clone" Objects, Arrays, Dates, RegExps, and more!
MITSep 17, 2026 · metrics 2.10.0
PyPI
google-research/torchsde
Differentiable SDE solvers with GPU support and efficient sensitivity analysis.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
jldbc/pybaseball
Pull current and historical baseball statistics using Python (Statcast, Baseball Reference, FanGraphs)
MITSep 17, 2026 · metrics 2.10.0
npm
eykrehbein/strest
⚡️ CI-ready tests for REST APIs configured in YAML
MITSep 14, 2026 · metrics 2.10.0
npm
vega/ts-json-schema-generator
Generate JSON schema from your Typescript sources
MITSep 15, 2026 · metrics 2.10.0
—
EnterpriseDB/repmgr
A lightweight replication manager for PostgreSQL (Postgres)
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
nickstenning/honcho
Honcho: a python clone of Foreman. For managing Procfile-based applications.
MITSep 17, 2026 · metrics 2.10.0
npm
MohammadYounes/rtlcss
Framework for transforming Cascading Style Sheets (CSS) from Left-To-Right (LTR) to Right-To-Left (RTL)
MITSep 23, 2026 · metrics 2.10.0
Go
anyproto/any-sync
An open-source protocol enabling high-performance, local-first, peer-to-peer, end-to-end encrypted collaborative apps.
MITSep 10, 2026 · metrics 2.10.0
NuGet
bezzad/Downloader
Fast, cross-platform and reliable multipart downloader with asynchronous progress events for .NET applications.
MITSep 10, 2026 · metrics 2.10.0
PyPI
tomerfiliba-org/rpyc
RPyC (Remote Python Call) - A transparent and symmetric RPC library for python
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
crcn/sift.js
Use Mongodb queries in JavaScript
MITSep 17, 2026 · metrics 2.10.0
npm
lquixada/cross-fetch
Universal WHATWG Fetch API for Node, Browsers and React Native.
MITSep 17, 2026 · metrics 2.10.0
npm
lukeed/kleur
The fastest Node.js library for formatting terminal text with ANSI colors~!
MITSep 16, 2026 · metrics 2.10.0
PyPI
dropbox/PyHive
Python interface to Hive and Presto. 🐝
Custom licenseSep 17, 2026 · metrics 2.10.0
—
unitycontainer/unity
This repository contains all relevant information about Unity Container suit
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI
influxdata/influxdb-python
Python client for InfluxDB
MITSep 12, 2026 · metrics 2.10.0
npm
mathiasbynens/punycode.js
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891.
MITSep 16, 2026 · metrics 2.10.0
RubyGems
igrigorik/em-websocket
EventMachine based WebSocket server
MITSep 12, 2026 · metrics 2.10.0
npm
toplenboren/simple-git-hooks
A simple git hooks manager for small projects
MITOct 2, 2026 · metrics 2.10.0