Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,038
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
Psiphon-Inc/configloader-go
Config loading library for Go
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
PvJScorebot/Scorebot-Scoreboard
Scorebot Caching and Events Service
AGPL-3.0Sep 10, 2026 · metrics 2.10.0
npm · crates.io
RaoFoundation/frontier
Ethereum compatibility layer for Substrate.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
RumovZ/android-tzdata
Parser for the Android-specific tzdata file
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
ViBiOh/auth
Authentification middleware for Golang
MITOct 13, 2026 · metrics 2.10.0
npm
ahmed-dinar/codeforces-api-node
Codeforces API Client Library for Node.js
MITOct 23, 2026 · metrics 2.10.0
Go
airtrafik/jscal
A Go library implementing RFC 8984 (JSCalendar) with converters for common calendar formats.
MITSep 11, 2026 · metrics 2.10.0
—
apache/grails-wrapper
Grails Wrapper
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
beluga-php/docker-php-api
Docker API generated files from OpenAPI Specification
MITOct 21, 2026 · metrics 2.10.0
npm
bigcommerce/eslint-config
No repository description published.
MITSep 20, 2026 · metrics 2.10.0
crates.io
blocklessnetwork/car-utils
No repository description published.
MITOct 23, 2026 · metrics 2.10.0
npm · crates.io · Maven
bloxbean/yano
A Cardano data node written in Java, powered by Yaci
MITOct 23, 2026 · metrics 2.10.0
Go
bnb-chain/greenfield-bsc-archiver
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
Packagist
bytexr/laravel-pennant-launchdarkly
No repository description published.
MITOct 13, 2026 · metrics 2.10.0
npm
cerebris/klassy.js
A class system featuring mixins, constructors, and superclass access.
MITOct 18, 2026 · metrics 2.10.0
npm
christophehurpeau/babel-preset-optimizations
Babel preset for optimizations only babel-minify plugins
ISCSep 9, 2026 · metrics 2.10.0
npm
cityssm/get-canadian-bank-name
A simple library to translate Canadian bank institution and transit numbers into the corresponding bank names.
MITOct 22, 2026 · metrics 2.10.0
—
cloudfoundry-attic/mkman
Tool to create bosh manifests
Apache-2.0Sep 26, 2026 · metrics 2.10.0
PyPI
cmastalli/crocoddyl
Crocoddyl is an optimal control library for robot control under contact sequence. Its solver is based on various efficient Differential Dynamic Programming (DDP)-like algorithms
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
Go
cmtonkinson/governator
Structured, architecture-first orchestration for autonomous, multi-agent development.
MITOct 23, 2026 · metrics 2.10.0
Maven
codehaus-plexus/plexus-cipher
No repository description published.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
coderofstuff/hw-app-kaspa
Ledger JS library for kaspa
No licenseSep 13, 2026 · metrics 2.10.0
Go
colt3k/utils
Numerous utility libraries and tools
MITOct 21, 2026 · metrics 2.10.0
crates.io
cube-js/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
datafuse-extras/msql-srv
Bindings for writing a server that can act as MySQL/MariaDB
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
deckhouse/csi-nfs
No repository description published.
No licenseSep 12, 2026 · metrics 2.10.0
Packagist
deprecated-packages/easy-coding-standard-tester
[READ-ONLY] The Best Way to Test Sniffs and Fixers
MITAug 4, 2026 · metrics 2.10.0
—
dials/dxtbx
Diffraction Experiment Toolbox
No licenseOct 18, 2026 · metrics 2.10.0
Go
dicedb/dicedb-go-defunct
GO SDK for DiceDB
BSD-2-ClauseSep 13, 2026 · metrics 2.10.0
npm
dougmoscrop/fold-case
A letter case folder with full Unicode support, i.e. based on the official Unicode case folding mappings.
MITSep 9, 2026 · metrics 2.10.0