Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,388
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
feross/typedarray-to-buffer
Convert a typed array to a Buffer without a copy.
MITOct 21, 2026 · metrics 2.10.0
RubyGems
kramdown/parser-gfm
kramdown-parser-gfm provides a kramdown parser for the GFM dialect of Markdown
Custom licenseOct 23, 2026 · metrics 2.10.0
Go · npm
GridProtectionAlliance/osisoftpi-grafana
Grafana Data Source Plugin for the OSIsoft PI System
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
SirusCodes/AntiLang
An esoteric language with an aim to break all the programming conventions
MITOct 22, 2026 · metrics 2.10.0
PyPI
polarsource/polar-python
Polar SDK for Python
MITOct 22, 2026 · metrics 2.10.0
PyPI
Breakthrough-Energy/PowerSimData
Simulation framework
MITOct 19, 2026 · metrics 2.10.0
crates.io
PoC-Consortium/engraver
PoCC Burstcoin Reference Plotter
MITOct 20, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-asn1
Contains parsers and serializers for ASN.1 (currently BER only)
MITOct 21, 2026 · metrics 2.10.0
Go
libp2p/go-libp2p-nat
NAT port mapping library for go-libp2p
MITOct 18, 2026 · metrics 2.10.0
—
monochromegane/go-gitignore
A fast gitignore matching library for Go.
MITOct 21, 2026 · metrics 2.10.0
—
aedobbyn/covid19us
R package for the COVID Tracking Project API providing US COVID-19 data
Custom licenseOct 22, 2026 · metrics 2.10.0
PyPI
jcb91/jupyter_highlight_selected_word
Jupyter notebook extension that enables highlighting every instance of the current word in the notebook
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io
thk1/send_wrapper
No repository description published.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
10XGenomics/lz4-rs
Rust LZ4 bindings
MITOct 20, 2026 · metrics 2.10.0
Packagist
TransbankDevelopers/transbank-sdk-php
Código fuente Transbank SDK para PHP
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
npm
phensley/cldr-engine
Internationalization and localization in Typescript with Unicode CLDR, batteries included
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
libp2p/go-tcp-transport
An implementation of a libp2p transport using tcp
MITOct 18, 2026 · metrics 2.10.0
crates.io
renegade-fi/ark-mpc
A framework for SPDZ-style maliciously-secure MPC.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
tobozo/YAMLDuino
YAML <=> JSON converter for ESP32, ESP8266, RP2040 and possibly other devices
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
Lucretiel/autocommand
Autocommand turns a python function into a CLI program
LGPL-3.0Oct 20, 2026 · metrics 2.10.0
crates.io
SSheldon/rust-block
Rust interface for Apple's C language extension of blocks.
No licenseOct 20, 2026 · metrics 2.10.0
npm
aspect-archives/toolchains_protoc
Pre-built protoc binary toolchain for Bazel, fetched from official protobuf releases
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist · npm
mautic/plugin-grapesjs-builder
GrapesJS HTML and MJML integration for Mautic
No licenseOct 21, 2026 · metrics 2.10.0
npm
jpillora/node-glob-all
Provide multiple patterns to node-glob
No licenseOct 18, 2026 · metrics 2.10.0
Maven
stephenc/jcip-annotations
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
stevenvachon/relateurl
Create a relative URL with options to minify.
MITOct 21, 2026 · metrics 2.10.0
PyPI
asahi417/kex
Kex is a python library for unsupervised keyword extraction from a document, providing an easy interface and benchmarks on 15 public datasets.
MITOct 22, 2026 · metrics 2.10.0
—
masterfeizz/EDuke3D
Unofficial port of EDuke32 for the Nintendo 3DS
GPL-2.0Oct 20, 2026 · metrics 2.10.0
npm
mcwhittemore/staged-git-files
Node module that returns a list of files waiting to be committed.
No licenseOct 18, 2026 · metrics 2.10.0
Go
nytimes/gcs-helper
Tool for proxying and mapping HTTP requests to Google Cloud Storage (GCS).
Apache-2.0Oct 21, 2026 · metrics 2.10.0