Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
558B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
twitchyliquid64/golang-asm
The assembler from the Go compiler, in library form.
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
PyPI
DrSchottky/pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
Custom licenseJul 19, 2026 · metrics 2.10.0
Packagist
Galbar/JsonPath-PHP
A JsonPath implementation in PHP
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
d3/d3-axis
Human-readable reference marks for scales.
ISCAug 4, 2026 · metrics 2.10.0
Go
tommy-muehle/go-mnd
Magic number detector for Go.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
ianwhite/orm_adapter
Provides a single point of entry for using basic features of ruby ORMs
MITJul 22, 2026 · metrics 2.10.0
npm
jonschlinkert/word-wrap
Wrap words to a specified length.
MITAug 4, 2026 · metrics 2.10.0
—
mmahnic/argumentum
C++ command line parsing library
MPL-2.0Jul 25, 2026 · metrics 2.10.0
Go
natefinch/atomic
atomic is a go package for atomic file writing
MITAug 29, 2026 · metrics 2.10.0
PyPI
kennethreitz-archive/args
Argument Parsing for Humans™
BSD-2-ClauseJul 30, 2026 · metrics 2.10.0
RubyGems
socketry/async-io
Concurrent wrappers for native Ruby IO & Sockets.
MITJul 20, 2026 · metrics 2.10.0
crates.io
AltF02/x11-rs
Rust bindings for X11 libraries
MITAug 11, 2026 · metrics 2.10.0
npm
broofa/node-int64
Support for representing 64-bit integers in JavaScript
MITAug 4, 2026 · metrics 2.10.0
NuGet
force-net/Crc32.NET
Fast version of Crc32 algorithm for .NET
MITJul 28, 2026 · metrics 2.10.0
npm
hoiheart/vue-diff
VueJS diff viewer plugin
MITJul 17, 2026 · metrics 2.10.0
PyPI
django-ldapdb/django-ldapdb
django-ldapdb, an LDAP database backend for Django
BSD-2-ClauseSep 8, 2026 · metrics 2.10.0
crates.io
dtolnay/proc-macro-hack
Procedural macros in expression position
Apache-2.0Aug 13, 2026 · metrics 2.10.0
crates.io
interledger/interledger-rs
An easy-to-use, high-performance Interledger implementation written in Rust
Custom licenseAug 14, 2026 · metrics 2.10.0
—
thecodingmachine/kickoff-docker-php
:whale: :elephant: :rocket: Easily setup a PHP project with Docker
MITJul 21, 2026 · metrics 2.10.0
RubyGems
documentcloud/closure-compiler
A Ruby Wrapper for the Google Closure Compiler
Custom licenseJul 22, 2026 · metrics 2.10.0
—
Arsunt/TR2Main
Tomb Raider II Injector Dynamic Library
GPL-3.0Jul 28, 2026 · metrics 2.10.0
Go
OpenPeeDeeP/depguard
Go linter that checks if package imports are in a list of acceptable packages.
GPL-3.0Aug 4, 2026 · metrics 2.10.0
Go
adikari/monorepo-diff-buildkite-plugin
Run separate pipelines for each folder in your monorepo
MITJul 23, 2026 · metrics 2.10.0
RubyGems
benalavi/waveform
Generate waveform images from audio files
No licenseJul 22, 2026 · metrics 2.10.0
Go
bnb-chain/go-sdk
No repository description published.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
crates.io
hyperium/hyper-tls
No repository description published.
Apache-2.0Aug 11, 2026 · metrics 2.10.0
npm
psaren/taro-ui-vue
UI KIT for Taro/vue
MITJul 23, 2026 · metrics 2.10.0
npm
tapjs/signal-exit
when you want to fire an event no matter how a process exits.
BlueOak-1.0.0Aug 4, 2026 · metrics 2.10.0
npm
unclechu/node-deep-extend
Recursive extend module
MITAug 4, 2026 · metrics 2.10.0
Packagist
Nayjest/Grids
Grids framework for Laravel
MITAug 24, 2026 · metrics 2.10.0