Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,284
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
piotrmurach/tty-logger
A readable, structured and beautiful logging for the terminal
MITSep 11, 2026 · metrics 2.10.0
PyPI
rbarrois/python-semanticversion
Semantic version comparison for Python (see http://semver.org/)
BSD-2-ClauseOct 23, 2026 · metrics 2.10.0
npm · PyPI
rzk-lang/rzk
An experimental proof assistant based on a type theory for synthetic ∞-categories.
No licenseSep 14, 2026 · metrics 2.10.0
Maven · npm · RubyGems
wuba/taro-playground
The Taro Playground App is a cross-platform application developed using Taro, to help developers develop and debug Taro applications.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Maven
diffplug/durian
Guava's spikier (unofficial) cousin
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
jenkins-x/jenkins-x-platform
Helm umbrella repo containing the helm charts for the Jenkins-X platform on Kubernetes
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
sffjunkie/astral
Python calculations for the position of the sun and moon.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
bafolts/tplant
Typescript to plantuml
GPL-3.0Sep 19, 2026 · metrics 2.10.0
crates.io
cbreeden/fxhash
A fast, non-secure, hashing algorithm derived from an internal hasher in FireFox.
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
ramonhagenaars/jsons
🐍 A Python lib for (de)serializing Python objects to/from JSON
MITOct 19, 2026 · metrics 2.10.0
npm
Oksydan/falcon
Prestashop starter theme that provides great development experience.
GPL-3.0Sep 13, 2026 · metrics 2.10.0
npm
ajv-validator/ajv-errors
Custom error messages in JSON Schemas for Ajv validator
MITSep 23, 2026 · metrics 2.10.0
PyPI
cloudendpoints/esp
Extensible Service Proxy
BSD-2-ClauseSep 11, 2026 · metrics 2.10.0
crates.io
Byron/jwalk
Filesystem walk performed in parallel with streamed and sorted results
MITSep 17, 2026 · metrics 2.10.0
PyPI
algorand/pyteal
Algorand Smart Contracts in Python
MITSep 17, 2026 · metrics 2.10.0
Go
omegion/ssh-manager
SSH Key Manager for 1Password, Bitwarden and AWS S3.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
NuGet
Calabonga/Microservice-Template
Templates for microservice architecture. Nimble Microservice Framework contains two modules. The first with OpenIddict and the second without OpenIddict. Templates are built on ASP.NET Core platform with different versions Core3.1, NET6, NET7 and NET8. You can create a new project extremely fast: in Visual Studio, Rider, dotnet CLI.
MITSep 16, 2026 · metrics 2.10.0
—
Rirusha/Cassette
Read-only mirror of https://gitlab.gnome.org/Rirusha/Cassette
GPL-3.0Sep 15, 2026 · metrics 2.10.0
npm · PyPI
builder555/PineSAM
UI for Pinecil V2 - control it over BLE from your PC or your mobile.
MITSep 14, 2026 · metrics 2.10.0
—
flyerhq/flutter_firebase_chat_core
Actively maintained, community-driven Firebase BaaS for chat applications with an optional chat UI.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
servo/cocoa-rs
DEPRECATED - Cocoa/Objective-C bindings for the Rust programming language
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
ehmicky/human-signals
Human-friendly process signals
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
langchain-ai/langchain-community
⚠️ No longer maintained, see linked issue
MITOct 23, 2026 · metrics 2.10.0
npm
tildeio/oasis.js
A lightweight library for embedding untrusted content and exposing capabilities. I guess it does two things? But it does them well.
MITSep 11, 2026 · metrics 2.10.0
RubyGems
SamSaffron/lru_redux
An efficient optionally thread safe LRU Cache
MITSep 11, 2026 · metrics 2.10.0
npm
moxystudio/node-proper-lockfile
An inter-process and inter-machine lockfile utility that works on a local or network file system.
MITSep 15, 2026 · metrics 2.10.0
crates.io
probe-rs/cargo-embed
a cargo extension for working with microcontrollers
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
ray-project/deltacat
A portable Multimodal Lakehouse powered by Ray that brings exabyte-level scalability and fast, ACID-compliant, change-data-capture to your ML and analytics workloads.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
recharts/react-smooth
react animation
MITSep 16, 2026 · metrics 2.10.0
NuGet
FirelyTeam/spark
Firely and Incendi's open source FHIR server
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0