Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,034
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
johnpbloch/wordpress
A fork of WordPress with Composer support added. Branches, tags, and trunk synced from upstream every 15 minutes.
No licenseSep 10, 2026 · metrics 2.10.0
PyPI
SigmaHQ/pySigma
Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
LGPL-2.1Oct 21, 2026 · metrics 2.10.0
PyPI · crates.io
cnpryer/huak
My experimental Python package manager.
MITSep 11, 2026 · metrics 2.10.0
PyPI
gmpy2/gmpy2
General Multi-Precision arithmetic for Python (GMP, MPIR, MPFR, MPC)
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
Hex · npm
izelnakri/paper_trail
Track and record all the changes in your database with Ecto. Revert back to anytime in history.
MITSep 9, 2026 · metrics 2.10.0
npm
node-modules/agentkeepalive
Support keepalive http agent.
MITSep 15, 2026 · metrics 2.10.0
PyPI
man-group/pytest-plugins
A grab-bag of nifty pytest plugins
MITOct 24, 2026 · metrics 2.10.0
RubyGems
perfectline/validates_url
URL Validation for Rails
MITSep 14, 2026 · metrics 2.10.0
RubyGems
threedaymonk/text
Collection of text algorithms. gem install text
Custom licenseOct 20, 2026 · metrics 2.10.0
crates.io
withoutboats/heck
oh heck, a case conversion library
Apache-2.0Sep 16, 2026 · metrics 2.10.0
RubyGems
zapnap/resque_mailer
Rails plugin for sending asynchronous email with ActionMailer and Resque
MITSep 12, 2026 · metrics 2.10.0
npm
Netflix/unleash
Professionally publish your JavaScript modules in one keystroke
Apache-2.0Sep 20, 2026 · metrics 2.10.0
RubyGems
enkessler/childprocess
Cross-platform Ruby library for managing child processes.
MITSep 12, 2026 · metrics 2.10.0
RubyGems
amerine/acts_as_tree
ActsAsTree -- Extends ActiveRecord to add simple support for organizing items into parent–children relationships.
MITSep 11, 2026 · metrics 2.10.0
PyPI
jdunck/python-unicodecsv
Python2's stdlib csv module is nice, but it doesn't support unicode. This module is a drop-in replacement which *does*. If you prefer python 3's semantics but need support in py2, you probably want https://github.com/ryanhiebert/backports.csv
Custom licenseSep 12, 2026 · metrics 2.10.0
npm · Maven
jonathanpalma/react-native-tesseract-ocr
Tesseract OCR wrapper for React Native
MITSep 19, 2026 · metrics 2.10.0
npm
privacy-ethereum/maci
Minimal Anti-Collusion Infrastructure (MACI)
MITOct 23, 2026 · metrics 2.10.0
RubyGems
vmg/rinku
Autolinking. Ruby. Yes, that's pretty much it.
ISCOct 20, 2026 · metrics 2.10.0
PyPI
ericvsmith/dataclasses
No repository description published.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
mrachinskiy/jewelcraft
Blender add-on for jewelry design
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
b-inary/wasm-postflop
[Development suspended] Advanced open-source Texas Hold'em GTO solver with optimized performance (web browser version)
AGPL-3.0Sep 15, 2026 · metrics 2.10.0
—
bw2012/UE4VoxelTerrain
Unreal Engine 4: Smooth voxel terrian example
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
sindresorhus/escape-string-regexp
Escape RegExp special characters
MITSep 16, 2026 · metrics 2.10.0
crates.io
zesterer/spin-rs
[spin-rs has moved to Codeberg!] Spin-based synchronization primitives
MITOct 23, 2026 · metrics 2.10.0
Packagist
mavinoo/laravelBatch
insert batch and update batch in laravel
MITOct 4, 2026 · metrics 2.10.0
RubyGems
NoRedInk/rspec-retry
retry randomly failing rspec example
MITSep 11, 2026 · metrics 2.10.0
PyPI
syrusakbary/validate_email
Validate_email verify if an email address is valid and really exists
Custom licenseSep 12, 2026 · metrics 2.10.0
Go
dsoprea/go-exif
A very complete, highly tested, standards-driven (but customizable) EXIF reader/writer lovingly written in Go.
MITOct 18, 2026 · metrics 2.10.0
npm
kylewetton/image-compare-viewer
Compare before and after images, for grading and other retouching for instance. Vanilla JS, zero dependencies.
MITSep 9, 2026 · metrics 2.10.0
npm
rain1017/memdb
Distributed Transactional In-Memory Database (全球首个支持分布式事务的MongoDB)
Apache-2.0Sep 19, 2026 · metrics 2.10.0