Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,800
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
jupyter-incubator/sparkmagic
Jupyter magics and kernels for working with remote Spark clusters
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
pry/pry-rails
Rails >= 3 pry initializer
MITSep 14, 2026 · metrics 2.10.0
PyPI
bytedance/flux
A fast communication-overlapping library for tensor/expert parallelism on GPUs.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
nose-devs/nose
nose is nicer testing for python
No licenseSep 17, 2026 · metrics 2.10.0
crates.io
rust-pretty-assertions/rust-pretty-assertions
Overwrite `assert_eq!` with a drop-in replacement, adding a colorful diff.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
python-poetry/cleo
Cleo allows you to create beautiful and testable command-line interfaces.
MITSep 16, 2026 · metrics 2.10.0
PyPI
scrapy/parsel
Parsel lets you extract data from XML/HTML documents using XPath or CSS selectors
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
crates.io
pomsky-lang/pomsky
A new, portable, regular expression language
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
gtanner/qrcode-terminal
QRCodes in your terminal, cause thats hot.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
tkaitchuck/aHash
aHash is a non-cryptographic hashing algorithm that uses the AES hardware instruction
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
yhat/pandasql
sqldf for pandas
MITSep 17, 2026 · metrics 2.10.0
npm
microsoft/tslib
Runtime library for TypeScript helpers.
0BSDSep 16, 2026 · metrics 2.10.0
Packagist
php-http/guzzle6-adapter
Guzzle 6 HTTP adapter
MITSep 15, 2026 · metrics 2.10.0
npm
nashwaan/xml-js
Converter utility between XML text and Javascript object / JSON text.
MITSep 17, 2026 · metrics 2.10.0
npm
omnidan/node-emoji
💖 simple emoji support for node.js projects
MITSep 17, 2026 · metrics 2.10.0
Go
warrant-dev/warrant
Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
subsquid/squid-sdk
TypeScript ETL toolkit for indexing Ethereum, Solana, and Substrate data, sourced from SQD Network.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
rbgirshick/yacs
YACS -- Yet Another Configuration System
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
caiiiycuk/js-dos
The best API for running dos programs in browser
No licenseSep 17, 2026 · metrics 2.10.0
NuGet
ookii-dialogs/ookii-dialogs-wpf
Awesome dialogs for Windows Desktop applications built with Microsoft .NET (WPF)
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
Go
grpc-ecosystem/go-grpc-prometheus
Prometheus monitoring for your gRPC Go servers.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
gosimple/slug
URL-friendly slugify with multiple languages support.
MPL-2.0Sep 23, 2026 · metrics 2.10.0
Go
valyala/bytebufferpool
Anti-memory-waste byte buffer pool
MITSep 14, 2026 · metrics 2.10.0
RubyGems
pages-themes/cayman
Cayman is a Jekyll theme for GitHub Pages
CC0-1.0Sep 10, 2026 · metrics 2.10.0
Packagist
php-http/discovery
Finds installed clients and message factories
MITOct 24, 2026 · metrics 2.10.0
Go
deckhouse/deckhouse
Kubernetes platform from Flant
Custom licenseSep 12, 2026 · metrics 2.10.0
RubyGems
thoughtbot/appraisal
A Ruby library for testing your library against different versions of dependencies.
MITOct 23, 2026 · metrics 2.10.0
—
OpenCover/opencover
A code coverage tool for .NET 2 and above (WINDOWS OS only), support for 32 and 64 processes with both branch and sequence points
Custom licenseSep 11, 2026 · metrics 2.10.0
—
ceph/ceph-container
Docker files and images to run Ceph in containers
No licenseSep 11, 2026 · metrics 2.10.0
RubyGems
guard/guard-rspec
Guard::RSpec automatically run your specs (much like autotest)
MITSep 12, 2026 · metrics 2.10.0