Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,105
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
OneOfOne/xxhash
A native implementation of the excellent XXHash hashing algorithm.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
fsprojects/FsUnit
FsUnit makes unit-testing with F# more enjoyable. It adds a special syntax to your favorite .NET testing framework.
MITSep 16, 2026 · metrics 2.10.0
Packagist
mehdi-fathi/eloquent-filter
Eloquent Filter is a package for filter data of models by the query strings. Easy to use and fully dynamic.
MITOct 17, 2026 · metrics 2.10.0
Packagist
creocoder/yii2-nested-sets
The nested sets behavior for the Yii framework.
Custom licenseSep 16, 2026 · metrics 2.10.0
NuGet
madelson/MedallionShell
A .NET library simplifying the execution and chaining of processes
MITSep 11, 2026 · metrics 2.10.0
Go
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
MITSep 16, 2026 · metrics 2.10.0
Go
StackExchange/wmi
WMI for Go
MITOct 22, 2026 · metrics 2.10.0
Maven
capnproto/capnproto-java
Cap'n Proto in pure Java
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
noya-app/noya
The open design tools SDK. Try our new experimental wireframing tool! 👇
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
datadriventests/ddt
Data-Driven Tests for Python Unittest
MITSep 12, 2026 · metrics 2.10.0
NuGet
Azure/azure-storage-net
Microsoft Azure Storage Libraries for .NET
Apache-2.0Oct 23, 2026 · metrics 2.10.0
—
Haixing-Hu/nju-thesis
南京大学学位论文XeLaTeX模板
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
abodelot/jquery.json-viewer
jQuery plugin for displaying JSON data
MITSep 9, 2026 · metrics 2.10.0
crates.io
arkworks-rs/poly-commit
A Rust library for polynomial commitments
Apache-2.0Sep 12, 2026 · metrics 2.10.0
RubyGems
piotrmurach/tty-spinner
A terminal spinner for tasks that have non-deterministic time frame.
MITSep 10, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenDJ
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
lupomontero/psl
JavaScript domain name parser based on the Public Suffix List
MITOct 20, 2026 · metrics 2.10.0
NuGet
mono/t4
T4 text templating engine
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
npm/npmlog
The logger that npm uses
Custom licenseSep 15, 2026 · metrics 2.10.0
—
mozilla/ssl-config-generator
Archived Mozilla SSL Configuration Generator . The code now lives at https://github.com/tlsref/configurator
MPL-2.0Sep 15, 2026 · metrics 2.10.0
—
aspose-words/Aspose.Words-for-Java
Aspose.Words for Java examples, plugins and showcases
MITOct 18, 2026 · metrics 2.10.0
Packagist
PlannrCrm/laravel-fast-refresh-database
🚀 Refresh your test databases faster than you've ever seen before
MITSep 15, 2026 · metrics 2.10.0
Maven
clojure/tools.deps.alpha
A functional API for transitive dependency graph expansion and the creation of classpaths
EPL-1.0Sep 20, 2026 · metrics 2.10.0
PyPI
HubSpot/hubspot-api-python
HubSpot API Python Client Libraries for V3 version of the API
Apache-2.0Sep 12, 2026 · metrics 2.10.0
RubyGems
Shopify/limiter
Simple Ruby rate limiting mechanism.
MITSep 11, 2026 · metrics 2.10.0
npm · Maven
creevey/creevey
Cross-browser screenshot testing tool for Storybook with fancy UI Runner.
MITSep 15, 2026 · metrics 2.10.0
—
leanprover-community/lean
Lean 3 Theorem Prover (community fork)
Apache-2.0Sep 12, 2026 · metrics 2.10.0
NuGet
serilog-contrib/serilog-sinks-elasticsearch
A Serilog sink that writes events to Elasticsearch
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
timoxley/columnify
Create text-based columns suitable for console output. Supports cell wrapping.
MITSep 15, 2026 · metrics 2.10.0
npm
maakbaas/esp8266-iot-framework
Framework for IoT projects implementing HTTPS requests, a React web interface, WiFi manager, live dashboard, configuration manager, file manager and OTA updates.
GPL-3.0Sep 12, 2026 · metrics 2.10.0