Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,777
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
hexops/gotextdiff
Unified text diffing in Go (copy of the internal diffing packages the officlal Go language server uses)
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
npm
hs85jeong/korean-lotto
No repository description published.
No licenseSep 5, 2026 · metrics 2.10.0
crates.io
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
jridgewell/set-array
No repository description published.
MITAug 4, 2026 · metrics 2.10.0
npm
mafintosh/mkdirp-classic
Mirror of mkdirp 0.5.2
MITAug 31, 2026 · metrics 2.10.0
—
maplibre/maplibre-native-base
MapLibre Native Base C++ Libraries
BSD-3-ClauseAug 22, 2026 · metrics 2.10.0
Go
michaelrampl/commity
Make writing commit messages fun again.
No licenseAug 22, 2026 · metrics 2.10.0
—
newrelic/nuget-azure-cloud-services
The nuget package for x64 apps (VMs or Cloud Services - Web Roles | Worker Roles) running on Windows Azure
MITJul 29, 2026 · metrics 2.10.0
—
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
MITJul 24, 2026 · metrics 2.10.0
PyPI
scieloorg/ioisis
I/O for ISIS files in Python
BSD-2-ClauseAug 24, 2026 · metrics 2.10.0
npm
sinonjs/commons
Simple functions shared among the sinon end user libraries
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITAug 4, 2026 · metrics 2.10.0
RubyGems
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
MITAug 21, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
MITAug 23, 2026 · metrics 2.10.0
Packagist
Automattic/sqlite-database-integration
A fork of https://github.com/WordPress/sqlite-database-integration/.
GPL-2.0Jul 25, 2026 · metrics 2.10.0
Go
AzureAD/microsoft-authentication-extensions-for-go
Secure cross-platform token cache for MSAL public client apps
MITJul 27, 2026 · metrics 2.10.0
Go
Bedrock-OSS/go-burrito
No repository description published.
MITAug 1, 2026 · metrics 2.10.0
—
Consensys/go-ethereum
Official golang implementation of the Ethereum protocol
LGPL-3.0Aug 3, 2026 · metrics 2.10.0
RubyGems · crates.io
DataDog/libddprof
libddprof has been renamed to libdatadog and development has moved to https://github.com/datadog/libdatadog
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Go
DataDog/viper
Go configuration with fangs
MITAug 1, 2026 · metrics 2.10.0
Go
Erda-project/Erda-proto-go
Generated code for Erda protobuf data modals and protocols.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
Ethan-Arrowood/undici
An HTTP/1.1 client, written from scratch for Node.js
MITJul 25, 2026 · metrics 2.10.0
npm
HubSpotWebTeam/wt-eslint-browser
This is a list of ESLint rules that are recommended for use with Hubspot Marketing WebTeam projects.
No licenseSep 3, 2026 · metrics 2.10.0
Go
K-Phoen/sdk
Library for using Grafana' structures in Go programs and client for Grafana REST API.
Apache-2.0Aug 20, 2026 · metrics 2.10.0
—
Polpetta/SecurityAndRiskManagementNotes
Notes about 'Security and Risk management' course in Italian
No licenseAug 4, 2026 · metrics 2.10.0
Packagist
PrestaShopCorp/module-lib-mbo-installer
A helper to ease the download and unzip of modules from the Addons Marketplace
OSL-3.0Jul 29, 2026 · metrics 2.10.0
crates.io
RumovZ/android-tzdata
Parser for the Android-specific tzdata file
Apache-2.0Aug 13, 2026 · metrics 2.10.0