Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,381
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
LowinLi/transformers-stream-generator
This is a text generation method which returns a generator, streaming out each token in real-time during inference, based on Huggingface/Transformers.
MITSep 12, 2026 · metrics 2.10.0
crates.io
davidpdrsn/assert-json-diff
Easily compare two JSON values and get great output
MITSep 17, 2026 · metrics 2.10.0
crates.io
kornelski/deunicode
Convert Unicode to ASCII "Ôóű, 🦄☣ in 北亰" :arrow_right: "Oou, unicorn face biohazard in Bei Jing"
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
kr/text
Miscellaneous functions for formatting text
MITSep 14, 2026 · metrics 2.10.0
npm
milvus-io/milvus-insight
Milvus management GUI
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
nightscout/share2nightscout-bridge
azure sidecar, bridges Dexcom share2 to Nightscout
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
rdohms/dms-filter
Library that offers Input Filtering based on Annotations for use with Objects. Check out 2.dev for 2.0 pre-release.
MITSep 13, 2026 · metrics 2.10.0
—
shadowproject/shadow
ShadowCore integration/staging tree
MITSep 19, 2026 · metrics 2.10.0
—
vjik/arcticModal
jQuery plugin for modal boxes development. See more here: http://arcticlab.ru/arcticmodal/
No licenseSep 11, 2026 · metrics 2.10.0
PyPI
willtrnr/pyxlsb
Excel 2007+ Binary Workbook (xlsb) reader for Python
LGPL-3.0Oct 24, 2026 · metrics 2.10.0
RubyGems
TwP/inifile
Native Ruby package for reading and writing INI files
No licenseSep 12, 2026 · metrics 2.10.0
Packagist
akeneo/api-php-client
PHP client of Akeneo PIM API
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
apenwarr/mkdocs-exclude
A mkdocs plugin that lets you exclude files or trees from your output.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Hex
appunite/mockery
Simple mocking library for asynchronous testing in Elixir.
Apache-2.0Oct 25, 2026 · metrics 2.10.0
PyPI
briancurtin/deprecation
A library to handle automated deprecations
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
browserify/diffie-hellman
pure js diffie-hellman
MITSep 15, 2026 · metrics 2.10.0
Go
chai2010/gettext-go
:ab: GNU gettext for Go (Imported By Kubernetes)
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
PyPI
coinbase/cdp-sdk-python
No repository description published.
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
MITSep 16, 2026 · metrics 2.10.0
NuGet
trbenning/serilog-sinks-xunit
The xunit test output sink for Serilog
MITSep 11, 2026 · metrics 2.10.0
RubyGems
e2/nenv
Convenient wrapper for Ruby's ENV
MITSep 11, 2026 · metrics 2.10.0
Go
elastic/go-windows
go-windows provides Go wrappers for Windows APIs.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
crates.io
gtk-rs/glib
DEPRECATED, use https://github.com/gtk-rs/gtk-rs-core repository instead!
MITSep 18, 2026 · metrics 2.10.0
npm
iden3/circomlibjs
Javascript library to work with circomlib circuits
No licenseSep 20, 2026 · metrics 2.10.0
RubyGems
jekyll/jekyll-watch
:eyes: Rebuild your Jekyll site when a file changes with the `--watch` switch.
MITSep 10, 2026 · metrics 2.10.0
RubyGems
mbklein/equivalent-xml
Easy equivalency tests for Nokogiri and Oga XML
MITSep 11, 2026 · metrics 2.10.0
npm
mpfast/TaroCreator
微信小程序 小程序模板 小程序可视化设计工具 Taro Taro UI
MITSep 13, 2026 · metrics 2.10.0
npm
pierrec/node-eval
Evaluate node require() module content directly
MITSep 23, 2026 · metrics 2.10.0
npm
primefaces/primeuix
PrimeUIX is a shared package used by all Prime libraries, allowing PrimeTek teams to unify theming.
MITOct 22, 2026 · metrics 2.10.0
RubyGems
qltysh-archive/ruby-test-reporter
DEPRECATED Uploads Ruby test coverage data to Code Climate
Custom licenseSep 11, 2026 · metrics 2.10.0