Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,551
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
sffjunkie/astral
Python calculations for the position of the sun and moon.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
npm
ehmicky/human-signals
Human-friendly process signals
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
recharts/react-smooth
react animation
MITAug 4, 2026 · metrics 2.10.0
NuGet
Calabonga/Microservice-Template
Templates for microservice architecture. Nimble Microservice Framework contains two modules. The first with OpenIddict and the second without OpenIddict. Templates are built on ASP.NET Core platform with different versions Core3.1, NET6, NET7 and NET8. You can create a new project extremely fast: in Visual Studio, Rider, dotnet CLI.
MITAug 4, 2026 · metrics 2.10.0
Go
pulumi/esc
Pulumi ESC is a centralized, secure service for environments, secrets, and configuration management, optimized for multi-cloud infrastructures and applications.
Apache-2.0Aug 6, 2026 · metrics 2.10.0
npm · PyPI
rzk-lang/rzk
An experimental proof assistant based on a type theory for synthetic ∞-categories.
No licenseJul 28, 2026 · metrics 2.10.0
—
Rirusha/Cassette
Read-only mirror of https://gitlab.gnome.org/Rirusha/Cassette
GPL-3.0Aug 1, 2026 · metrics 2.10.0
npm · PyPI
builder555/PineSAM
UI for Pinecil V2 - control it over BLE from your PC or your mobile.
MITJul 27, 2026 · metrics 2.10.0
npm
jonschlinkert/is-number
JavaScript/Node.js utility. Returns `true` if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.
MITAug 4, 2026 · metrics 2.10.0
PyPI
abersheeran/a2wsgi
Convert WSGI app to ASGI app or ASGI app to WSGI app.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
zertosh/loose-envify
Like envify but much faster
MITAug 4, 2026 · metrics 2.10.0
npm
then/is-promise
Test whether an object looks like a promises-a+ promise
MITAug 4, 2026 · metrics 2.10.0
—
fsharp/fsharp-compiler-docs
Doc build for FSharp.Compiler.Service
MITJul 27, 2026 · metrics 2.10.0
NuGet
CatLib/Framework
deprecated, use : https://github.com/CatLib/CatLib
MITJul 27, 2026 · metrics 2.10.0
crates.io
SergioBenitez/yansi
A dead simple ANSI terminal color painting library for Rust.
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Go
mitchellh/colorstring
Go (golang) library for colorizing strings for terminal output.
MITAug 29, 2026 · metrics 2.10.0
Go
mitchellh/reflectwalk
reflectwalk is a Go library for "walking" complex structures, similar to walking a filesystem.
MITJul 28, 2026 · metrics 2.10.0
RubyGems
Azure/azure-sdk-for-ruby
Ruby SDK for Azure Resource Manager: build and manage your Azure cloud infrastructure (Compute, Virtual Networks, Storage, etc...) using Ruby.
MITJul 20, 2026 · metrics 2.10.0
PyPI
a-r-j/ProteinWorkshop
Benchmarking framework for protein representation learning. Includes a large number of pre-training and downstream task datasets, models and training/task utilities. (ICLR 2024)
MITSep 8, 2026 · metrics 2.10.0
PyPI
pycroscopy/pycroscopy
Scientific analysis of nanoscale materials imaging data
MITJul 24, 2026 · metrics 2.10.0
npm
VenusProtocol/venus-protocol
BNB Smart Chain Venus Protocol
BSD-3-ClauseJul 29, 2026 · metrics 2.10.0
Packagist
amphp/parallel-functions
Simplified parallel processing for PHP based on Amp.
MITAug 13, 2026 · metrics 2.10.0
npm
luniehq/lunie
Lunie is staking, simplified ✨
Apache-2.0Aug 16, 2026 · metrics 2.10.0
Go
PasarGuard/node
PasarGuard Node | Decentralized Censorship-Resistant Access Layer
GPL-3.0Jul 20, 2026 · metrics 2.10.0
Maven
gitskarios/GithubAndroidSdk
[DEPRECATED] Android SDK for Github API
MITJul 27, 2026 · metrics 2.10.0
PyPI
grantjenks/py-tree-sitter-languages
Binary Python wheels for all tree sitter languages.
Custom licenseAug 11, 2026 · metrics 2.10.0
PyPI
finalduty/cis-benchmarks-audit
Simple command line tool to check for compliance against CIS Benchmarks
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
florimondmanca/asgi-lifespan
Programmatic startup/shutdown of ASGI apps.
MITAug 27, 2026 · metrics 2.10.0
npm
sindresorhus/yn
Parse yes/no like values
MITAug 29, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-java
Java grammar for tree-sitter
MITAug 27, 2026 · metrics 2.10.0