Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,342
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
vkomulai/finnish-bank-utils
A micro Javascript library for validating and creating Finnish IBAN bank account numbers and reference numbers
MITOct 18, 2026 · metrics 2.10.0
npm
web-atoms/core
Light weight feature rich UI Framework for JavaScript for Browser with Dependency Injection, Mocking and Unit Testing
No licenseSep 11, 2026 · metrics 2.10.0
npm
xtuc/acorn-import-attributes
Support for import assertions in acorn
MITSep 15, 2026 · metrics 2.10.0
Packagist
Guzzle3/parser
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Parser component. Provides parsing interfaces for Cookies, HTTP messages, and URI Templates
No licenseSep 13, 2026 · metrics 2.10.0
Hex
HGInsights/avalanche
Avalanche is an Elixir Snowflake Connector built on top of the Snowflake SQL API v2.
Apache-2.0Oct 25, 2026 · metrics 2.10.0
Go
Jille/raft-grpc-leader-rpc
Send gRPCs to your Raft leader
BSD-2-ClauseSep 14, 2026 · metrics 2.10.0
npm
OffCourse/offcourse-next
Repository for open source contribution to the Offcourse platform. Open to Javascript developers of all levels!
MITOct 21, 2026 · metrics 2.10.0
Go
Zweih/qp
qp - Query Packages. Query installed packages across ecosystems on Linux and macOS.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
—
buildkite/test-collector-ruby
Moved to buildkite/bktest — Buildkite Test Engine collector for Ruby test frameworks
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
cronofy/cronofy-php
Cronofy PHP library
MITSep 12, 2026 · metrics 2.10.0
PyPI
dfm/kepler.py
Fast and stable solver for Kepler's equation in Python
MITOct 22, 2026 · metrics 2.10.0
—
diepthihoang/mpboot
MPBoot: Fast phylogenetic maximum parsimony tree inference and bootstrap approximation
GPL-2.0Sep 11, 2026 · metrics 2.10.0
Packagist
elastic/elastic-transport-php
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
RubyGems
excid3/acts_as_tenant
Easy multi-tenancy for Rails in a shared database setup.
MITSep 13, 2026 · metrics 2.10.0
RubyGems
faye/permessage-deflate-ruby
Per-message DEFLATE compression extension for WebSocket connections
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
garyb/purescript-indexed-monad
No repository description published.
MITSep 11, 2026 · metrics 2.10.0
npm
here-be/snapdragon-util
Utilities for the snapdragon parser/compiler.
MITSep 15, 2026 · metrics 2.10.0
PyPI
intertwine/observational-memory
Local-first shared memory for Claude Code, Codex, OpenCode, Kimi, Grok, Cowork, and Hermes, with bounded observation and searchable Markdown context.
MITSep 11, 2026 · metrics 2.10.0
npm
isaacs/pseudomap
Like `new Map` but for older JavaScripts
BlueOak-1.0.0Sep 15, 2026 · metrics 2.10.0
PyPI
jenisys/parse_type
parse_type extends the "parse" module (opposite of "string.format()")
MITOct 24, 2026 · metrics 2.10.0
npm
jonschlinkert/define-property
Define a non-enumerable property on an object.
MITSep 15, 2026 · metrics 2.10.0
npm
jonschlinkert/object-visit
Call the given method on each value in the given object.
MITSep 15, 2026 · metrics 2.10.0
crates.io · Go
kroma-network/zkevm-circuits
This is a mirror of zkevm-circuits(https://github.com/scroll-tech/zkevm-circuits).
MITSep 18, 2026 · metrics 2.10.0
PyPI
li-plus/rouge-metric
A Python wrapper of the official ROUGE-1.5.5.pl script and a re-implementation of full ROUGE metrics.
MITOct 18, 2026 · metrics 2.10.0
npm
mahdyar/ansi-html-community
An elegant lib that converts the chalked text to HTML.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
octokit/plugin-enterprise-server.js
Octokit plugin for GitHub Enterprise REST APIs
MITSep 16, 2026 · metrics 2.10.0
RubyGems
rvm/executable-hooks
No repository description published.
Custom licenseSep 12, 2026 · metrics 2.10.0
NuGet
space-wizards/SpaceWizards.HttpListener
Managed, maintained, updated, and unprofessionally butchered fork of System.Net.HttpListener
MITSep 15, 2026 · metrics 2.10.0
PyPI
spec-first/swagger_ui_bundle
bundled swagger-ui pip package
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
stjohnjohnson/cucumber-junit
Cucumber.js JSON to JUnitXML converter
MITOct 18, 2026 · metrics 2.10.0