Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,381
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go · npm
OpenSLO/oslo
CLI tool for the OpenSLO spec
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
Rich-Harris/vlq
Generate, and decode, base64 VLQ mappings for sourcemaps and other uses
MITSep 23, 2026 · metrics 2.10.0
crates.io
SergioBenitez/state
A Rust library for safe and effortless global and thread-local state management.
Custom licenseSep 10, 2026 · metrics 2.10.0
—
mapbox/eternal
A C++14 compile-time/constexpr map and hash map with minimal binary footprint
ISCOct 20, 2026 · metrics 2.10.0
PyPI
plizonczyk/noiseprotocol
Noise Protocol Framework - Python 3 implementation
MITOct 20, 2026 · metrics 2.10.0
Packagist
reactphp/async
Async utilities and fibers for ReactPHP.
MITSep 14, 2026 · metrics 2.10.0
Go
PaesslerAG/jsonpath
No repository description published.
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
crates.io
hyperium/mime
MIMEs in Rust
MITSep 16, 2026 · metrics 2.10.0
—
lucoiso/UEHttpGPT
HttpGPT is an Unreal Engine plugin that facilitates integration with OpenAI's GPT based services (ChatGPT and DALL-E) through asynchronous REST requests, making it easy for developers to communicate with these services.
MITSep 12, 2026 · metrics 2.10.0
Maven
vmware-archive/vsphere-automation-sdk-java
Java samples, language bindings, and API reference documentation for vSphere, VMC, and NSX-T using the VMware REST API
MITSep 13, 2026 · metrics 2.10.0
Maven
0x4f53/Wristkey
A free and open-source 2FA app for smartwatches.
MITSep 16, 2026 · metrics 2.10.0
—
PaloAltoNetworks/iron-skillet
IronSkillet is a set of day-one configuration templates for PAN-OS to enable alignment with security best practices. See the Quick Start section below to get started using the template configurations.
MITSep 11, 2026 · metrics 2.10.0
PyPI
aio-libs/aiohttp-cors
CORS support for aiohttp
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
imdone/imdone-atom
imdone-atom has been archived
MITSep 16, 2026 · metrics 2.10.0
npm
microflo/microflo
Live dataflow programming for microcontrollers and embedded
MITSep 13, 2026 · metrics 2.10.0
crates.io
yury/cidre
Apple frameworks bindings for rust
MITSep 12, 2026 · metrics 2.10.0
Hex
TheFirstAvenger/ets
:ets, the Elixir way
MITSep 11, 2026 · metrics 2.10.0
Packagist
brazanation/php-documents
Library to provide Brazilian Documents as Value Objects in PHP
No licenseSep 18, 2026 · metrics 2.10.0
RubyGems
mloughran/em-hiredis
Eventmachine redis client
MITSep 12, 2026 · metrics 2.10.0
crates.io
abonander/mime_guess
MIME type guessing of file extensions for Rust.
MITSep 17, 2026 · metrics 2.10.0
npm
aidenlx/table-extended
Extend basic table in Obsidian with MultiMarkdown table syntax
No licenseSep 13, 2026 · metrics 2.10.0
—
broadinstitute/ichorCNA
Estimating tumor fraction in cell-free DNA from ultra-low-pass whole genome sequencing.
GPL-3.0Sep 15, 2026 · metrics 2.10.0
—
dsherret/code-block-writer
Code writer for JavaScript and TypeScript code.
MITSep 23, 2026 · metrics 2.10.0
RubyGems
dtao/safe_yaml
Parse YAML safely
MITSep 10, 2026 · metrics 2.10.0
—
intel-aero/meta-intel-aero
Yocto layer to support Intel Aero platform
GPL-2.0Sep 11, 2026 · metrics 2.10.0
NuGet
jamesmanning/RunProcessAsTask
Simple wrapper around System.Diagnostics.Process to expose it as a System.Threading.Tasks.Task
MITSep 11, 2026 · metrics 2.10.0
—
jupyterhub/helm-chart
A store of Helm chart tarballs for deploying JupyterHub and BinderHub on a Kubernetes cluster
No licenseSep 18, 2026 · metrics 2.10.0
Go · npm
twirapp/twir
Twitch chat bot written on Golang and TypeScript.
Custom licenseJul 20, 2026 · metrics 2.10.0
npm
wp-statistics/GeoLite2-Country
Free MaxMind GeoLite2-Country database for IP geolocation. Ultra-lightweight (~2MB), auto-updated via jsDelivr CDN.
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/publisher
Localization publisher for your Laravel application
MITSep 12, 2026 · metrics 2.10.0