Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,403
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
CAFxX/httpcompression
Go middleware to compress HTTP responses with Gzip, Deflate, Brotli, Zstandard, XZ/LZMA2, LZ4, and more..
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
Dynatrace/dynatrace-oneagent-operator
Kubernetes/Openshift Operator for managing Dynatrace OneAgent deployments
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
anomalyco/kysely-data-api
No repository description published.
No licenseOct 25, 2026 · metrics 2.10.0
npm
auth0-lab/mdl
Parse and validate MDOC CBOR encoded binaries according to ISO 18013-5.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
RubyGems
census-instrumentation/opencensus-ruby
A stats collection and distributed tracing framework
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
ddarriba/modeltest
Best-fit model selection
GPL-3.0Oct 21, 2026 · metrics 2.10.0
RubyGems
dougal/base58
Base58 is a Ruby library/gem for converting ints to and from base58.
MITSep 12, 2026 · metrics 2.10.0
Go
gorilla/css
Package gorilla/css is a CSS3 tokenizer.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
RubyGems
jekyll/jekyll-avatar
A Jekyll plugin for rendering GitHub avatars
MITSep 13, 2026 · metrics 2.10.0
—
jsdom/abab
Perfectly spec-compliant atob and btoa implementations
No licenseOct 21, 2026 · metrics 2.10.0
NuGet
kaby76/Antlr4BuildTasks
Third-party build tool for 'Official' Antlr4 tool and runtime parsers using .Net. Drop-in replacement for 'Antlr4cs' Antlr4 tool and build rules.
MITSep 14, 2026 · metrics 2.10.0
PyPI
rosscdh/mkdocs-markdownextradata-plugin
A MkDocs plugin that injects the mkdocs.yml extra variables into the markdown template
MITSep 14, 2026 · metrics 2.10.0
PyPI
sphinx-doc/sphinxext-opengraph
Sphinx extension to generate unique OpenGraph metadata
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
Go
yeya24/promlinter
No repository description published.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist
FriendsOfBehat/Mink
PHP 5.3+ web browser emulator abstraction
MITSep 14, 2026 · metrics 2.10.0
—
JuliaData/InvertedIndices.jl
A simple index type that allows for inverted selections
Custom licenseSep 12, 2026 · metrics 2.10.0
—
JuliaIO/TranscodingStreams.jl
Simple, consistent interfaces for any codec.
Custom licenseSep 12, 2026 · metrics 2.10.0
—
ethereum/consensus-spec-tests
Common tests for the Ethereum proof-of-stake consensus layer
MITOct 18, 2026 · metrics 2.10.0
—
facebookarchive/clock
Clock is a small library for mocking time in Go.
MITSep 23, 2026 · metrics 2.10.0
npm
knowsuchagency/fulcrum
What if Openclaw, Vibe Kanban, Vibetunnel, and Dokploy had a baby?
Custom licenseSep 11, 2026 · metrics 2.10.0
Packagist
martin-helmich/typo3-typoscript-lint
Find coding errors in your TypoScript files.
MITSep 13, 2026 · metrics 2.10.0
PyPI
mbr/asciitree
+-- ASCII Trees.
MITSep 12, 2026 · metrics 2.10.0
npm
pkg-size/action
📦📊 GitHub Action to reports on the size of your npm package
MITSep 11, 2026 · metrics 2.10.0
crates.io
sfackler/rust-socks
No repository description published.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
silverwind/default-gateway
Get the default network gateway, cross-platform.
No licenseSep 15, 2026 · metrics 2.10.0
npm
stanford-oval/thingtalk
The Programming Language of Virtual Assistants
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
syntax-tree/hast-util-to-jsx-runtime
hast utility to transform to preact, react, solid, svelte, vue, etc
MITOct 21, 2026 · metrics 2.10.0
—
watr/mbeacon
Turn your mac into an iBeacon.
MITSep 16, 2026 · metrics 2.10.0
—
JuliaPlanners/PDDL.jl
Julia parser, interpreter and compiler interface for the Planning Domain Definition Language (PDDL). Planners not included.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
Kazhuu/asm2cfg
Python command-line tool and GDB extension to view and save x86, ARM and objdump assembly files as control-flow graph (CFG) pdf files
MITOct 23, 2026 · metrics 2.10.0