Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,735
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
jakartaee/interceptors
Jakarta Interceptors
Custom licenseAug 21, 2026 · metrics 2.10.0
RubyGems
joshbuddy/em-spec
Simple BDD API for testing asynchronous Ruby/EventMachine code
MITJul 22, 2026 · metrics 2.10.0
crates.io
jsgroth/jgb
An attempt at writing a Game Boy emulator
MITJul 17, 2026 · metrics 2.10.0
PyPI
kojix2/crystal_kernel
Python wrapper kernel for Crystal
BSD-3-ClauseJul 17, 2026 · metrics 2.10.0
PyPI
ljhopkins2/broadcastify-archtk
The Broadcastify Archive Toolkit for python
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
Packagist
marineusde/larapex-charts
A Laravel wrapper for apex charts
MITJul 24, 2026 · metrics 2.10.0
crates.io
rust-bitcoin/bitcoin-payment-instructions
This Repo Has Been Migrated
No licenseJul 25, 2026 · metrics 2.10.0
—
sid-krish/rhometa
metagenome population recombination rate estimation pipeline
MITJul 26, 2026 · metrics 2.10.0
PyPI
sphinx-contrib/jquery
Extension to include jQuery on newer Sphinx releases
0BSDAug 27, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-raw
utility to reparse a hast tree
MITAug 31, 2026 · metrics 2.10.0
RubyGems
turbolinks/turbolinks-source-gem
Turbolinks JavaScript assets, packaged as a RubyGem
MITJul 20, 2026 · metrics 2.10.0
PyPI
valory-xyz/IEKit
An autonomous service implementing a decentralized Impact Evaluator
Apache-2.0Aug 1, 2026 · metrics 2.10.0
npm
wooorm/bail
Throw if given an error
MITAug 4, 2026 · metrics 2.10.0
Go
ykadowak/zerologlint
Linter that detects the wrong usage of zerolog that a user forgets to dispatch zerolog.Event.
MITAug 4, 2026 · metrics 2.10.0
PyPI
Benardi/touvlo
:robot: ML algorithms implemented from scratch and provided block by block
MITAug 25, 2026 · metrics 2.10.0
npm
CycloneDX/cdxgen-action
GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products
MITJul 22, 2026 · metrics 2.10.0
Go
Cyprinus12138/otelgin
OpenTelemetry trace & metric instrumentation as Gin Middleware
Apache-2.0Jul 31, 2026 · metrics 2.10.0
—
DetroitApps/RetroMultiManager
Manage your Dofus Retro accounts
GPL-3.0Aug 1, 2026 · metrics 2.10.0
Maven
JohnLCaron/electionguard-java
A port of electionguard-python to Java.
MITJul 27, 2026 · metrics 2.10.0
Packagist · npm
alleyinteractive/wp-curate
WordPress Curation Plugin
GPL-2.0Aug 22, 2026 · metrics 2.10.0
npm · Maven
aml-org/amf
AMF (AML Modeling Framework) is an open-source library capable of parsing and validating AML metadata documents.
Custom licenseAug 5, 2026 · metrics 2.10.0
Go
arkarmin-gg/trashbox
Trashbox 🗑️ is a small, fast and cross-platform Go utility package for dealing with OS native Trash Box or Recycle Bin according to user OS. Include clean set of APIs for move file or directory to Trash Box, recovery and put back them to their original place and much more.
MITSep 3, 2026 · metrics 2.10.0
PyPI
binarynightowl/covid19_python
A fast, powerful, and flexible way to get up to date COVID-19 data for any major city, state, country, and total world wide data, with just one line of code
MITSep 8, 2026 · metrics 2.10.0
npm
component/is-module
No repository description published.
MITAug 29, 2026 · metrics 2.10.0
Packagist
composer-unused/contracts
Contract repository for composer-unused
MITJul 22, 2026 · metrics 2.10.0
Go · npm
contenox/contenox-v0
An agent server. Agents, tools and models declared in files; every action checked against your policy before it runs. Any LLM, on your machine, Apache-2.0.
Apache-2.0Sep 8, 2026 · metrics 2.10.0
crates.io
cowprotocol/gas-estimation
No repository description published.
Custom licenseJul 19, 2026 · metrics 2.10.0
Go
crate-crypto/go-kzg-4844
No repository description published.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Packagist · npm
e0ipso/schema-forms-php
Creates form definitions from JSON Schema property definitions and display configuration.
GPL-2.0Aug 18, 2026 · metrics 2.10.0
PyPI
encryptogroup/RAID-PIR
Multi-Server PIR (CCSW'14)
Custom licenseAug 14, 2026 · metrics 2.10.0