Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,309
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
dsnet/compress
Collection of compression related Go packages.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
npm
TooTallNate/node-bindings
Helper module for loading your native module's `.node` file
MITOct 21, 2026 · metrics 2.10.0
npm
Flet/github-slugger
:octocat: Generate a slug just like GitHub does for markdown headings.
ISCOct 20, 2026 · metrics 2.10.0
npm
prisma/prisma-next
⛔ Moved to prisma/prisma — Prisma Next development continues there under the name Prisma ORM v8. This repository is archived.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
shama/napa
:wine_glass: A helper for installing stuff without a package.json with npm.
MITOct 18, 2026 · metrics 2.10.0
npm
ilammy/msvc-dev-cmd
GitHub Action to setup Developer Command Prompt for Microsoft Visual C++
MITOct 21, 2026 · metrics 2.10.0
Go
iancoleman/orderedmap
orderedmap is a golang map where the keys keep the order that they're added. It can be de/serialized from/to JSON. It's based closely on the python collections.OrderedDict.
MITOct 21, 2026 · metrics 2.10.0
npm
Yoast/YoastSEO.js
Analyze content on a page and give SEO feedback as well as render a snippet preview.
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
go-stack/stack
Package stack implements utilities to capture, manipulate, and format call stacks.
MITOct 21, 2026 · metrics 2.10.0
—
hegeldev/hegel-rust
Property-based testing for Rust, built on Hypothesis
MITOct 20, 2026 · metrics 2.10.0
PyPI
backstage/mkdocs-monorepo-plugin
✚ Build multiple documentation folders in a single Mkdocs. Designed for large codebases.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
max-mapper/extract-zip
Zip extraction written in pure JavaScript. Extracts a zip into a directory.
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
npm
allegro/typescript-strict-plugin
Typescript plugin that allows turning on strict mode in specific files or directories.
MITOct 22, 2026 · metrics 2.10.0
PyPI
box/flaky
Plugin for nose or pytest that automatically reruns flaky tests.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
pkg/term
Package term manages POSIX terminals.
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
Go
HumanSecurity/marshmallow
Marshmallow provides a flexible and performant JSON unmarshalling in Go. It specializes in dealing with unstructured struct - when some fields are known and some aren't, with zero performance overhead nor extra coding needed.
MITOct 21, 2026 · metrics 2.10.0
PyPI
paperswithcode/sota-extractor
The SOTA extractor pipeline
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
neithere/argh
An argparse wrapper that doesn't make you say "argh" each time you deal with it.
LGPL-3.0Oct 19, 2026 · metrics 2.10.0
PyPI · npm · Maven
baidubce/bce-qianfan-sdk
Provide best practices for LMOps, as well as elegant and convenient access to the features of the Qianfan MaaS Platform. (提供大模型工具链最佳实践，以及优雅且便捷地访问千帆大模型平台）
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
vlasovskikh/funcparserlib
Recursive descent parsing library for Python based on functional combinators
MITOct 20, 2026 · metrics 2.10.0
Go
terra-farm/terraform-provider-virtualbox
VirtualBox provider for Terraform
MITOct 18, 2026 · metrics 2.10.0
PyPI
salaniz/pycocoevalcap
Python 3 support for the MS COCO caption evaluation tools
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
Obsidian-TTRPG-Community/dice-roller
Inline dice rolling for Obsidian.md
No licenseOct 20, 2026 · metrics 2.10.0
—
h3rald/min
A small but practical concatenative programming language and shell
MITOct 19, 2026 · metrics 2.10.0
npm
d3/d3-time-format
Parse and format times, inspired by strptime and strftime.
ISCOct 21, 2026 · metrics 2.10.0
Packagist
lanthaler/JsonLD
JSON-LD processor for PHP
MITOct 20, 2026 · metrics 2.10.0
Maven
spring-attic/spring-cloud-stream-binder-kafka
Spring Cloud Stream binders for Apache Kafka and Kafka Streams
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
allenai/openie-standalone
Quality information extraction at web scale. Edit
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
ajafff/tsutils
utility functions for working with typescript's AST
MITOct 21, 2026 · metrics 2.10.0
npm
gristlabs/ts-interface-checker
Runtime library to validate data against TypeScript interfaces.
Apache-2.0Oct 21, 2026 · metrics 2.10.0