Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,086
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
sybrenstuvel/python-rsa
Python-RSA is a pure-Python RSA implementation.
Custom licenseSep 12, 2026 · metrics 2.10.0
Go
antchfx/xmlquery
xmlquery is Golang XPath package for XML query.
MITSep 23, 2026 · metrics 2.10.0
—
peter-winter/ctpg
Compile Time Parser Generator is a C++ single header library which takes a language description as a C++ code and turns it into a LR1 table parser with a deterministic finite automaton lexical analyzer, all in compile time.
MITSep 11, 2026 · metrics 2.10.0
npm
vladikoff/netflix-1080p-firefox
🍿 Force 1080p Netflix playback in Firefox
No licenseSep 12, 2026 · metrics 2.10.0
npm
Laboratoria/curriculum
El bootcamp de @Laboratoria es un programa de aprendizaje inmersivo de 6 meses enfocado en los perfiles de Web Developer y UX Designer.
CC-BY-SA-4.0Sep 11, 2026 · metrics 2.10.0
Hex
cpjk/canary
:hatching_chick: Elixir authorization and resource-loading library for Plug applications.
MITSep 9, 2026 · metrics 2.10.0
Packagist
sensiolabs/SensioDistributionBundle
Base bundle for Symfony Distributions
MITSep 13, 2026 · metrics 2.10.0
npm
stacktracejs/error-stack-parser
Extract meaning from JS Errors
MITOct 21, 2026 · metrics 2.10.0
—
btcsuite/btcutil
Provides bitcoin-specific convenience functions and types
No licenseOct 18, 2026 · metrics 2.10.0
crates.io
ogham/rust-ansi-term
Rust library for ANSI terminal colours and styles (bold, underline)
MITSep 18, 2026 · metrics 2.10.0
Packagist
php-http/curl-client
cURL client
MITSep 16, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITOct 21, 2026 · metrics 2.10.0
npm
tvcutsem/harmony-reflect
ES5 shim for ES6 Reflect and Proxy objects
Custom licenseSep 23, 2026 · metrics 2.10.0
npm
ForbesLindesay/throat
Throttle a collection of promise returning functions
MITSep 15, 2026 · metrics 2.10.0
—
avishorp/TM1637
Arduino library for TM1637 (LED Driver)
LGPL-3.0Oct 20, 2026 · metrics 2.10.0
npm
sindresorhus/make-dir
Make a directory and its parents if needed - Think `mkdir -p`
MITSep 16, 2026 · metrics 2.10.0
PyPI
kazhala/InquirerPy
:snake: Python port of Inquirer.js (A collection of common interactive command-line user interfaces)
MITSep 10, 2026 · metrics 2.10.0
npm
astracompiler/cli
🚀 Fast, reliable and easy-to-use js-to-exe compiler.
MITSep 15, 2026 · metrics 2.10.0
RubyGems · npm
davishmcclurg/json_schemer
JSON Schema validator. Supports drafts 4, 6, 7, 2019-09, 2020-12, OpenAPI 3.0, and OpenAPI 3.1.
MITSep 10, 2026 · metrics 2.10.0
NuGet
nickdodd79/AutoBogus
A C# library complementing the Bogus generator by adding auto creation and population capabilities.
MITSep 11, 2026 · metrics 2.10.0
NuGet
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
ricmoo/pyaes
Pure-Python implementation of AES block-cipher and common modes of operation.
MITOct 24, 2026 · metrics 2.10.0
Go
canonical/go-dqlite
Go bindings for libdqlite
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
samuelcolvin/pytest-pretty
pytest plugin for pretty printing the test summary.
MITSep 12, 2026 · metrics 2.10.0
npm
visionmedia/bytes.js
node byte string parser
MITSep 16, 2026 · metrics 2.10.0
Packagist
Shopify/shopify-api-php
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
crates.io
rust-vmm/vm-virtio
This is a public archive. The code now lives in the mono-repo: https://github.com/rust-vmm/rust-vmm/
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
EvgenyOrekhov/eslint-config-hardcore
The most strict (yet practical) ESLint config. 53 plugins. 1405 rules. React, Vue, Node, and pure JS/TS.
MITSep 30, 2026 · metrics 2.10.0
npm
Omnistac/zedux
:zap: A Molecular State Engine for React
MITOct 21, 2026 · metrics 2.10.0