Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,822
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
otterize/credentials-operator
Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud
Apache-2.0Sep 13, 2026 · metrics 2.10.0
RubyGems
piotrmurach/tty-file
File manipulation utility methods
MITSep 11, 2026 · metrics 2.10.0
RubyGems
prawnpdf/prawn-templates
Experimental extraction of template features from Prawn
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
purescript/purescript-record
Functions for working with records and polymorphic labels
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
RubyGems
sstephenson/ruby-eco
Ruby Eco Compiler
MITSep 12, 2026 · metrics 2.10.0
RubyGems
yujinakayama/astrolabe
An object-oriented Ruby AST extension for Parser
MITSep 11, 2026 · metrics 2.10.0
PyPI
AOMediaCodec/av1-isobmff
Official specification of the AOM group for the carriage of AV1 in ISOBMFF
No licenseOct 18, 2026 · metrics 2.10.0
npm
Flagsmith/flagsmith-js-client
Javascript Client for Flagsmith. Ship features with confidence using feature flags and remote config. Host yourself or use our hosted version at https://www.flagsmith.com/
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
aesara-devs/aeppl
Tools for an Aesara-based PPL.
MITOct 4, 2026 · metrics 2.10.0
npm
cowboy/node-exit
A replacement for process.exit that ensures stdio are fully drained before exiting.
MITOct 20, 2026 · metrics 2.10.0
npm
fjc0k/mounted
基于 Taro 的小程序组件库。
MITSep 13, 2026 · metrics 2.10.0
npm
glenselle/nACH2
nACH is a highly customizable Node.js module exposing a high & low-level API for generating ACH files for use within the ACH network
No licenseOct 18, 2026 · metrics 2.10.0
—
jaegertracing/jaeger-lib
A collection of shared infrastructure libraries used by different components of Jaeger.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Maven
jakartaee/common-annotations-api
Jakarta Annotations
Custom licenseSep 14, 2026 · metrics 2.10.0
PyPI
lava-nc/lava-optimization
Neuromorphic mathematical optimization with Lava
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
crates.io
nixpulvis/oursh
Your comrade through the perilous world of UNIX.
MITOct 19, 2026 · metrics 2.10.0
npm
open-draft/strict-event-emitter
Type-safe EventEmitter for browser and Node.js.
No licenseSep 23, 2026 · metrics 2.10.0
Hex
phoenixframework/phoenix_view
View abstraction for Phoenix v1.0-v1.6
MITSep 11, 2026 · metrics 2.10.0
npm
qri-io/desktop
Qri Desktop
GPL-3.0Oct 26, 2026 · metrics 2.10.0
—
quiet/quiet-dsp
Digital signal processing library
MITSep 15, 2026 · metrics 2.10.0
—
ssfrr/DeepDiffs.jl
Compute and pretty-print diffs for data structures like arrays and dictionaries
Custom licenseOct 14, 2026 · metrics 2.10.0
npm
titicacadev/triple-config-kit
ESLint, Prettier, Stylelint configuration for TRIPLE
MITJul 19, 2026 · metrics 2.10.0
—
CESNET/ipfixcol
IPFIXcol is an implementation of an IPFIX (RFC 7011) collector
Custom licenseOct 25, 2026 · metrics 2.10.0
—
CiscoDevNet/ansible-meraki
Cisco Meraki Ansible Collection
GPL-3.0Oct 8, 2026 · metrics 2.10.0
Go
ConduitIO/bwlimit
Limit the bandwidth of a connection.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
feross/typedarray-to-buffer
Convert a typed array to a Buffer without a copy.
MITOct 21, 2026 · metrics 2.10.0
—
googleapis/python-language
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-language
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
iamport/iamport-rest-client-nodejs
NodeJS사용자를 위한 아임포트 REST API 연동 모듈입니다.
MITSep 26, 2026 · metrics 2.10.0
RubyGems
kramdown/parser-gfm
kramdown-parser-gfm provides a kramdown parser for the GFM dialect of Markdown
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
matttproud/golang_protobuf_extensions
Support for streaming Protocol Buffer messages for the Go language (golang).
Apache-2.0Sep 14, 2026 · metrics 2.10.0