Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,572
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
rdohms/dms-filter
Library that offers Input Filtering based on Annotations for use with Objects. Check out 2.dev for 2.0 pre-release.
MITJul 26, 2026 · metrics 2.10.0
npm
sindresorhus/has-flag
Check if argv has a specific flag
MITAug 4, 2026 · metrics 2.10.0
PyPI
willtrnr/pyxlsb
Excel 2007+ Binary Workbook (xlsb) reader for Python
LGPL-3.0Aug 27, 2026 · metrics 2.10.0
RubyGems
TwP/inifile
Native Ruby package for reading and writing INI files
No licenseJul 21, 2026 · metrics 2.10.0
PyPI
briancurtin/deprecation
A library to handle automated deprecations
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
coinbase/cdp-sdk-python
No repository description published.
Custom licenseJul 25, 2026 · metrics 2.10.0
npm
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
MITAug 4, 2026 · metrics 2.10.0
npm
nightscout/share2nightscout-bridge
azure sidecar, bridges Dexcom share2 to Nightscout
No licenseSep 9, 2026 · metrics 2.10.0
Go
chai2010/gettext-go
:ab: GNU gettext for Go (Imported By Kubernetes)
BSD-3-ClauseAug 21, 2026 · metrics 2.10.0
npm
feross/is-buffer
Determine if an object is a Buffer
MITAug 22, 2026 · metrics 2.10.0
npm
mafintosh/thunky
Delay the evaluation of a paramless async function and cache the result
MITAug 31, 2026 · metrics 2.10.0
npm
mpfast/TaroCreator
微信小程序 小程序模板 小程序可视化设计工具 Taro Taro UI
MITJul 23, 2026 · metrics 2.10.0
npm
primefaces/primeuix
PrimeUIX is a shared package used by all Prime libraries, allowing PrimeTek teams to unify theming.
MITSep 5, 2026 · metrics 2.10.0
RubyGems
qltysh-archive/ruby-test-reporter
DEPRECATED Uploads Ruby test coverage data to Code Climate
Custom licenseJul 20, 2026 · metrics 2.10.0
npm
request/caseless
Caseless object set/get/has, very useful when working with HTTP headers.
Apache-2.0Aug 31, 2026 · metrics 2.10.0
npm
sindresorhus/xdg-basedir
Get XDG Base Directory paths
MITAug 31, 2026 · metrics 2.10.0
RubyGems
w3c-validators/w3c_validators
A Ruby wrapper for the World Wide Web Consortium’s online validation services.
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
canonical/sec-cvescan
Analyzes an Ubuntu system and checks for unpatched vulnerabilities.
GPL-3.0Sep 8, 2026 · metrics 2.10.0
crates.io
davidpdrsn/assert-json-diff
Easily compare two JSON values and get great output
MITAug 11, 2026 · metrics 2.10.0
Go
open-telemetry/opentelemetry-log-collection
OpenTelemetry log collection library
Apache-2.0Sep 8, 2026 · metrics 2.10.0
Go
agext/levenshtein
Levenshtein distance and similarity metrics with customizable edit costs and Winkler-like bonus for common prefix.
Apache-2.0Jul 28, 2026 · metrics 2.10.0
RubyGems
jekyll/jekyll-avatar
A Jekyll plugin for rendering GitHub avatars
MITJul 24, 2026 · metrics 2.10.0
PyPI
jeremykawahara/derm7pt
Dermatology dataset composed of a diagnosis and seven-point checklist criteria labels
Custom licenseSep 8, 2026 · metrics 2.10.0
NuGet
kaby76/Antlr4BuildTasks
Third-party build tool for 'Official' Antlr4 tool and runtime parsers using .Net. Drop-in replacement for 'Antlr4cs' Antlr4 tool and build rules.
MITJul 30, 2026 · metrics 2.10.0
RubyGems
krasnoukhov/sidekiq-middleware
Additional sidekiq middleware
MITJul 20, 2026 · metrics 2.10.0
Packagist
mindplay-dk/middleman
Dead simple PSR-15 / PSR-7 middleware dispatcher
No licenseJul 29, 2026 · metrics 2.10.0
npm
auth0-lab/mdl
Parse and validate MDOC CBOR encoded binaries according to ISO 18013-5.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
benjamn/wryware
A collection of packages that are probably a little too clever. Use at your own wrisk.
MITSep 8, 2026 · metrics 2.10.0
RubyGems
census-instrumentation/opencensus-ruby
A stats collection and distributed tracing framework
Apache-2.0Jul 20, 2026 · metrics 2.10.0
—
jsdom/abab
Perfectly spec-compliant atob and btoa implementations
No licenseAug 31, 2026 · metrics 2.10.0