Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,085
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
unjs/uncrypto
Single API for Web Crypto API and Crypto Subtle working in Node.js, Browsers and other runtimes
MITSep 23, 2026 · metrics 2.10.0
npm
kornelski/http-cache-semantics
RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
crates.io · npm
lanyeeee/hitomi-downloader
A GUI-based multi-threaded downloader for hitomi hitomi.la 一个带GUI的用于 hitomi hitomi.la 的多线程下载器
MITSep 10, 2026 · metrics 2.10.0
PyPI
AzureAD/azure-activedirectory-library-for-python
ADAL for Python
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
baverman/flameprof
Flamegraph generator for cProfile stats
MITSep 12, 2026 · metrics 2.10.0
Maven
javaee/servlet-spec
The API and Issue Tracker for the JCP Standard Java Servlet Specification
Custom licenseSep 14, 2026 · metrics 2.10.0
RubyGems
railsware/rack_session_access
Rack middleware that provides access to rack.session environment
MITOct 20, 2026 · metrics 2.10.0
npm
ajv-validator/ajv-keywords
Additional JSON-Schema keywords for Ajv JSON validator
MITSep 13, 2026 · metrics 2.10.0
—
d4l3k/messagediff
A library for doing diffs of arbitrary Golang structs.
MITSep 11, 2026 · metrics 2.10.0
PyPI
matthewgilbert/pdblp
pandas wrapper for Bloomberg Open API
MITOct 22, 2026 · metrics 2.10.0
PyPI
schodet/nxt-python
NXT-Python is a python driver/interface for the Lego Mindstorms NXT robot based on NXT_python.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Packagist
webmozarts/glob
A PHP implementation of Ant's glob.
MITSep 13, 2026 · metrics 2.10.0
npm
dcos/dcos-ui
The UI for The Datacenter Operating System
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
moq/moq.spikes
The most popular and friendly mocking framework for .NET
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
evfro/polara
Recommender system and evaluation framework for top-n recommendations tasks that respects polarity of feedbacks. Fast, flexible and easy to use. Written in python, boosted by scientific python stack.
MITSep 14, 2026 · metrics 2.10.0
crates.io
tokio-rs/valuable
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
PyPI
vfilimonov/co2meter
A Python library for USB CO2 meter
MITOct 19, 2026 · metrics 2.10.0
npm
browserify/node-util
node.js util module as a module
MITOct 21, 2026 · metrics 2.10.0
RubyGems
bugsnag/bugsnag-ruby
BugSnag error monitoring & reporting software for rails, sinatra, rack and ruby
MITSep 12, 2026 · metrics 2.10.0
Packagist · npm
felixfbecker/php-advanced-json-rpc
A more advanced PHP implementation of the JSONRPC Protocol 📞❗
ISCSep 13, 2026 · metrics 2.10.0
PyPI
pytest-dev/pytest-subtests
unittest subTest() support and subtests fixture
MITOct 24, 2026 · metrics 2.10.0
RubyGems
segiddins/cocoapods-dependencies
Shows a project's CocoaPods dependency graph
MITSep 12, 2026 · metrics 2.10.0
Maven
ACINQ/eclair-mobile
An Android wallet for the Lightning Network
Apache-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
Marwes/schemafy
Crate for generating rust types from a json schema
MITOct 23, 2026 · metrics 2.10.0
NuGet
ferram4/Ferram-Aerospace-Research
Aerodynamics model for Kerbal Space Program
Custom licenseSep 15, 2026 · metrics 2.10.0
RubyGems
flyerhzm/uniform_notifier
uniform notifier for rails logger, customized logger, javascript alert, javascript console, growl and xmpp
MITSep 11, 2026 · metrics 2.10.0
RubyGems
guard/rb-fsevent
FSEvents API with signals handled (without RubyCocoa)
MITSep 12, 2026 · metrics 2.10.0
Maven
spinnaker/orca
Orchestration engine
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Maven
xolstice/protobuf-maven-plugin
Maven Plugin that executes the Protocol Buffers (protoc) compiler
Custom licenseSep 14, 2026 · metrics 2.10.0
crates.io
citronneur/rdp-rs
Remote Desktop Protocol in RUST
MITOct 2, 2026 · metrics 2.10.0