Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,076
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
amphp/parallel-functions
Simplified parallel processing for PHP based on Amp.
MITSep 18, 2026 · metrics 2.10.0
PyPI
grantjenks/py-tree-sitter-languages
Binary Python wheels for all tree sitter languages.
Custom licenseSep 17, 2026 · metrics 2.10.0
—
syncthing/relaysrv
The Syncthing relay server
No licenseOct 19, 2026 · metrics 2.10.0
crates.io
SergioBenitez/yansi
A dead simple ANSI terminal color painting library for Rust.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
luniehq/lunie
Lunie is staking, simplified ✨
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
finalduty/cis-benchmarks-audit
Simple command line tool to check for compliance against CIS Benchmarks
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
florimondmanca/asgi-lifespan
Programmatic startup/shutdown of ASGI apps.
MITOct 24, 2026 · metrics 2.10.0
Maven
gitskarios/GithubAndroidSdk
[DEPRECATED] Android SDK for Github API
MITSep 14, 2026 · metrics 2.10.0
PyPI · npm · crates.io +1
tree-sitter/tree-sitter-java
Java grammar for tree-sitter
MITOct 24, 2026 · metrics 2.10.0
NuGet
Azure/azure-storage-net-data-movement
Azure Storage Data Movement Library for .Net
MITSep 11, 2026 · metrics 2.10.0
npm
jonschlinkert/set-value
Set nested properties on an object using dot-notation.
MITSep 15, 2026 · metrics 2.10.0
PyPI
gpuopenanalytics/pynvml
Provide Python access to the NVML library for GPU diagnostics
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
PyPI
scrapy-plugins/scrapy-deltafetch
Scrapy spider middleware to ignore requests to pages containing items seen in previous crawls
No licenseSep 20, 2026 · metrics 2.10.0
Packagist
alperenersoy/filament-export
Customizable export and print functionality for Filament Admin Panel
No licenseOct 13, 2026 · metrics 2.10.0
RubyGems
protobuf-ruby/beefcake
A sane Google Protocol Buffers library for Ruby
MITSep 11, 2026 · metrics 2.10.0
npm
sindresorhus/callsites
Get callsites from the V8 stack trace API
MITSep 16, 2026 · metrics 2.10.0
RubyGems
bbatsov/powerpack
Some useful extensions to the core Ruby classes
MITSep 11, 2026 · metrics 2.10.0
PyPI
decalage2/olefile
olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file formats, McAfee antivirus quarantine files, etc.
Custom licenseSep 10, 2026 · metrics 2.10.0
RubyGems
defunkt/colored
Colors in your terminal. Unmaintained.
MITSep 12, 2026 · metrics 2.10.0
crates.io
KokaKiwi/rust-hex
A basic crate to encode values to hexadecimal representation. Originally extracted from rustc-serialize.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
dart-archive/html
Dart port of html5lib. For parsing HTML/HTML5 with Dart. Works in the client and on the server.
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
phpdave11/gofpdf
A PDF document generator with high level support for text, drawing and images
MITOct 18, 2026 · metrics 2.10.0
NuGet
richardschneider/net-mdns
Simple multicast DNS
MITSep 11, 2026 · metrics 2.10.0
npm
Airtable/blocks
No repository description published.
No licenseSep 15, 2026 · metrics 2.10.0
crates.io
carllerche/codegen
A Rust library providing a builder API to generate Rust code.
MITSep 11, 2026 · metrics 2.10.0
Go
cpuguy83/go-md2man
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
RubyGems
jekyll/jekyll-gist
:page_with_curl: Liquid tag for displaying GitHub Gists in Jekyll sites.
MITSep 10, 2026 · metrics 2.10.0
—
lancaster-university/microbit-dal
No repository description published.
Custom licenseSep 13, 2026 · metrics 2.10.0
—
mwitkow/go-conntrack
Go middleware for net.Conn tracking (Prometheus/trace)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
MetaMask/providers
An Ethereum Provider that connects over a stream, as injected into websites by MetaMask
MITSep 20, 2026 · metrics 2.10.0