Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,218
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · Maven
aml-org/amf
AMF (AML Modeling Framework) is an open-source library capable of parsing and validating AML metadata documents.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
arkarmin-gg/trashbox
Trashbox 🗑️ is a small, fast and cross-platform Go utility package for dealing with OS native Trash Box or Recycle Bin according to user OS. Include clean set of APIs for move file or directory to Trash Box, recovery and put back them to their original place and much more.
MITOct 21, 2026 · metrics 2.10.0
RubyGems
arlimus/sslshake
Ruby library for pure SSL/TLS handshake testing. No additional requirements.
No licenseSep 11, 2026 · metrics 2.10.0
PyPI
binarynightowl/covid19_python
A fast, powerful, and flexible way to get up to date COVID-19 data for any major city, state, country, and total world wide data, with just one line of code
MITOct 22, 2026 · metrics 2.10.0
Packagist
brefphp/monolog-bridge
Monolog formatter optimized for AWS Lambda and CloudWatch
MITSep 26, 2026 · metrics 2.10.0
RubyGems
castwide/backport
A pure Ruby library for event-driven IO
MITSep 11, 2026 · metrics 2.10.0
npm
clockor2/phylojs
Javascript library for manipulating phylogenetic trees
GPL-3.0Oct 25, 2026 · metrics 2.10.0
npm
component/is-module
No repository description published.
MITOct 20, 2026 · metrics 2.10.0
Packagist
composer-unused/contracts
Contract repository for composer-unused
MITSep 13, 2026 · metrics 2.10.0
Go · npm
contenox/contenox-v0
An agent server. Agents, tools and models declared in files; every action checked against your policy before it runs. Any LLM, on your machine, Apache-2.0.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
cowprotocol/gas-estimation
No repository description published.
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
crate-crypto/go-kzg-4844
No repository description published.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
damorej-at-theinstitutes/webpack-concat-files-plugin
Concatenate and transform files using Webpack
MITOct 18, 2026 · metrics 2.10.0
Packagist · npm
dnwjn/nova-button
A Nova package for rendering buttons on different views.
MITSep 12, 2026 · metrics 2.10.0
Hex
electric-sql/pg_query_ex
No repository description published.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
PyPI
encryptogroup/RAID-PIR
Multi-Server PIR (CCSW'14)
Custom licenseSep 18, 2026 · metrics 2.10.0
RubyGems
envygeeks/pathutil
:dash: A faster pure Ruby implementation of Pathname with extra bits.
MITSep 10, 2026 · metrics 2.10.0
—
grosser/autotest-rails
No repository description published.
No licenseSep 12, 2026 · metrics 2.10.0
Hex
growthbook/growthbook-elixir
GrowthBook SDK for Elixir
MITSep 9, 2026 · metrics 2.10.0
npm
iVis-at-Bilkent/cose-base
Core module for compound spring embedder based layout styles
MITSep 15, 2026 · metrics 2.10.0
npm
indutny/offset-buffer
No repository description published.
MITOct 21, 2026 · metrics 2.10.0
npm
isaacs/package-json-from-dist
No repository description published.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
jridgewell/resolve-uri
Resolve a URI relative to an optional base URI
MITSep 16, 2026 · metrics 2.10.0
—
jsdom/w3c-hr-time
An implementation of the W3C High Resolution Time Level 2 specification.
MITSep 23, 2026 · metrics 2.10.0
—
kfsm/pipe
process pipeline library
Apache-2.0Sep 9, 2026 · metrics 2.10.0
—
kubero-dev/kubero-operator
An operator to run applications on Kubernetes like on Heroku
GPL-3.0Sep 29, 2026 · metrics 2.10.0
Go
lasiar/canonicalheader
Golang linter checking the canonicality of the http header
MITSep 16, 2026 · metrics 2.10.0
—
namberino/nimble
The NIMBLE Programming Language
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
nats-io/jwt.js
JWT tokens signed using nkeys for Ed25519 for the NATS JavaScript ecosystem
Apache-2.0Sep 29, 2026 · metrics 2.10.0
npm
neofinancial/config-dug
Config loader with support for AWS Secrets Manager
MITSep 11, 2026 · metrics 2.10.0