Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,425
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Hex
voltone/aws_rds_castore
AWS RDS CA certificate store for Elixir
No licenseOct 25, 2026 · metrics 2.10.0
npm
watson/is-lambda
Detect if your code is running on an AWS Lambda server
MITSep 15, 2026 · metrics 2.10.0
npm
ChALkeR/safer-buffer
Modern Buffer API polyfill without footguns
MITSep 16, 2026 · metrics 2.10.0
—
OpenFAM/OpenFAM
OpenFAM Reference Implementation
Custom licenseSep 15, 2026 · metrics 2.10.0
—
PuerkitoBio/urlesc
Proper URL escaping as per RFC3986
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
PyPI
Pylons/translationstring
A library used for internationalization (i18n) duties related to translation.
Custom licenseOct 21, 2026 · metrics 2.10.0
—
anoma/juvix-stdlib
The Juvix standard library
No licenseSep 12, 2026 · metrics 2.10.0
Go
apache/incubator-horaedb-meta
Meta service of HoraeDB cluster.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
bbglab/muts-needle-plot
A needle plot for mutation data
Custom licenseOct 25, 2026 · metrics 2.10.0
RubyGems
chef-boneyard/chef-sugar
No repository description published.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
deepset-ai/canals
A component orchestration engine
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
deprecated-packages/auto-bind-parameter
[DEPRECATED] [READ-ONLY] Auto bind parameters in for your Symfony applications
MITSep 16, 2026 · metrics 2.10.0
npm
euank/node-parse-numeric-range
Parses expressions like 1-10,20-30. Returns an energetic array.
ISCSep 23, 2026 · metrics 2.10.0
npm
eventualbuddha/lines-and-columns
Maps lines and columns to character offsets and back.
MITSep 16, 2026 · metrics 2.10.0
—
fflewddur/archivo
A cross-platform app for saving recordings from a TiVo to your computer.
GPL-3.0Oct 18, 2026 · metrics 2.10.0
PyPI
googleapis/python-crc32c
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-crc32c
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
griptape-ai/griptape-tools
Tools for the Griptape Framework.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Packagist
intacct/intacct-sdk-php
Official repository of the Sage Intacct SDK for PHP
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
ironsh/irons
No repository description published.
MITSep 13, 2026 · metrics 2.10.0
Maven
jakartaee/inject
No repository description published.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist · npm
jfeltkamp/cookiesjsr
Easily expandable cookie consent tool.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
jonschlinkert/is-directory
Extends `stats.isDirectory()`, returns `true` if a filepath is a directory.
MITSep 23, 2026 · metrics 2.10.0
—
leggedrobotics/grid_map
Universal grid map library for mobile robotic mapping
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
npm
micromatch/expand-brackets
Expand POSIX bracket expressions (character classes) in glob patterns.
MITSep 15, 2026 · metrics 2.10.0
Hex
miguel-s/ex_heroicons
Heroicons for Phoenix, Phoenix LiveView and Surface
MITOct 25, 2026 · metrics 2.10.0
npm
mohd-akram/jify
JSON indexed file database/querying library/tool
MITOct 23, 2026 · metrics 2.10.0
NuGet
monemihir/LZMA-SDK
7z SDK code made available as a nuget package
MITSep 11, 2026 · metrics 2.10.0
npm
nexdrew/which-module
:m: Find the module object for something that was require()d
ISCOct 20, 2026 · metrics 2.10.0
PyPI
njzjz/openbabel-wheel
No repository description published.
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
octokit/webhooks-methods.js
Methods to handle GitHub Webhook requests
MITSep 16, 2026 · metrics 2.10.0