Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,830
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
gopeak/dectask
简单高效、基于敏捷开发的项目管理工具
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
tim-kos/node-retry
Abstraction for exponential and custom retry strategies for failed operations.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
MITSep 17, 2026 · metrics 2.10.0
npm
arcanis/clipanion
Type-safe CLI library / framework with no runtime dependencies
No licenseSep 17, 2026 · metrics 2.10.0
npm
npkgz/cli-progress
:hourglass: easy to use progress-bar for command-line/terminal applications
MITSep 17, 2026 · metrics 2.10.0
npm
redis/redis-om-node
Object mapping, and more, for Redis and Node.js. Written in TypeScript.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
rack/rack-contrib
Contributed Rack Middleware and Utilities
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
VainF/pytorch-msssim
Fast and differentiable MS-SSIM and SSIM for pytorch.
MITSep 17, 2026 · metrics 2.10.0
npm
developit/dlv
Safe deep property access in 120 bytes. x = dlv(obj, 'a.b.x')
No licenseSep 17, 2026 · metrics 2.10.0
npm
StefanTerdell/zod-to-json-schema
Converts Zod schemas to Json schemas
ISCOct 21, 2026 · metrics 2.10.0
Maven
wh1t3p1g/ysomap
A helpful Java Deserialization exploit framework.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
google/textfsm
Python module for parsing semi-structured text into python tables.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
thomasloven/lovelace-layout-card
🔹 Get more control over the placement of lovelace cards.
MITSep 14, 2026 · metrics 2.10.0
PyPI
Toblerity/Fiona
Fiona reads and writes geographic data files
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
davidbonnet/astring
🌳 Tiny and fast JavaScript code generator from an ESTree-compliant AST.
MITSep 17, 2026 · metrics 2.10.0
PyPI
piskvorky/sqlitedict
Persistent dict, backed by sqlite3 and pickle, multithread-safe.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
container-interop/container-interop
Containers interoperability
MITSep 18, 2026 · metrics 2.10.0
npm
google-gemini/deprecated-generative-ai-js
This SDK is now deprecated, use the new unified Google GenAI SDK.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
binance/binance-futures-connector-python
Simple python connector to Binance Futures API
MITSep 20, 2026 · metrics 2.10.0
RubyGems
DmitryTsepelev/store_model
Work with JSON-backed attributes as ActiveRecord-ish models
MITSep 15, 2026 · metrics 2.10.0
PyPI · Maven
Kotlin/kotlin-jupyter
Kotlin kernel for Jupyter/IPython
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
Polymarket/py-clob-client
Python client for the Polymarket CLOB
MITSep 17, 2026 · metrics 2.10.0
Go
evanphx/json-patch
A Go library to apply RFC6902 patches and create and apply RFC7386 patches
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
zertosh/invariant
invariant
MITSep 17, 2026 · metrics 2.10.0
PyPI
html5lib/html5lib-python
Standards-compliant library for parsing and serializing HTML documents and fragments in Python
MITOct 23, 2026 · metrics 2.10.0
PyPI · Go
allwefantasy/auto-coder
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Maven
cataclysmbn/Cataclysm-BN
Cataclysm: Bright Nights: A fork/variant of Cataclysm:DDA by CleverRaven with a mod registry at https://mods.cataclysmbn.org/
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
coreos/go-iptables
Go wrapper around iptables utility
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
Koenkk/zigbee-herdsman-converters
Collection of device converters to be used with zigbee-herdsman
MITSep 12, 2026 · metrics 2.10.0
RubyGems
igrigorik/em-http-request
Asynchronous HTTP Client (EventMachine + Ruby)
No licenseSep 12, 2026 · metrics 2.10.0