Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,775
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
No licenseSep 8, 2026 · metrics 2.10.0
—
emilopezcano/SixSigma
SixSigma R package
No licenseAug 4, 2026 · metrics 2.10.0
PyPI
executablebooks/mdformat-tables
An mdformat plugin for rendering tables
MITJul 18, 2026 · metrics 2.10.0
npm
jonschlinkert/is-extendable
Answers the question: "can this value have keys?". Returns true if a value is any of the object types: array, regexp, plain object, function or date. Useful for determining if a value is an object that can be extended.
MITAug 29, 2026 · metrics 2.10.0
Packagist
m2mtech/flysystem-stream-wrapper
A stream wrapper for Flysystem V2+
MITAug 7, 2026 · metrics 2.10.0
PyPI
sdispater/pytzdata
Official timezone database for Python.
MITAug 8, 2026 · metrics 2.10.0
NuGet · npm
serenity-is/common-features
Contains demo modules and common features shared between Serene and StartSharp
No licenseJul 25, 2026 · metrics 2.10.0
crates.io
servo/core-text-rs
DEPRECATED - Rust bindings for CoreText.
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
spdy-http2/handle-thing
The Thing when you need it
No licenseAug 31, 2026 · metrics 2.10.0
Packagist
superfaktura/apiclient
SuperFaktúra oficiálny PHP-API klient.
MITJul 28, 2026 · metrics 2.10.0
crates.io
swgillespie/unicode-categories
A simple crate that allows for unicode categories can be queried for characters.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Packagist
theofidry/console
Library for creating CLI commands or applications
MITSep 5, 2026 · metrics 2.10.0
Maven
valtimo-platform/valtimo-backend-libraries
Welcome at the Valtimo repository. Valtimo is the less-code platform for Business Process Automation. Built on top of business process orchestrator Camunda. Valtimo's goal is to make implementing business process automation and case management easy. Valtimo is the server side component for business process automation.
Custom licenseJul 16, 2026 · metrics 2.10.0
NuGet
AleXr64/Telegram-bot-framework
Framework to simplify writing telegram bots
MITAug 2, 2026 · metrics 2.10.0
NuGet
CoreCompat/libgdiplus-packaging
NuGet packages which include native builds of libgdiplus for macOS.
MITJul 18, 2026 · metrics 2.10.0
—
SpiNNakerManchester/spinnaker_tools
SpiNNaker API, sark, sc&mp, bmp firmware and build tools
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Packagist
Sylius/SyliusInventoryBundle
[READ-ONLY] Flexible inventory management for Symfony2 e-commerce applications.
MITSep 3, 2026 · metrics 2.10.0
PyPI
afonasev/flake8-plugin-utils
The package provides base classes and utils for flake8 plugin writing
MITJul 28, 2026 · metrics 2.10.0
npm
artilleryio/artillery-plugin-publish-metrics
Moved to https://github.com/artilleryio/artillery/tree/main/packages/artillery-plugin-publish-metrics
No licenseJul 16, 2026 · metrics 2.10.0
Go · npm
brigadecore/brigade-github-app
A Brigade v1.x compatible gateway for forwarding events from GitHub to Brigade
Apache-2.0Aug 19, 2026 · metrics 2.10.0
—
cappyzawa/starlark.vim
vim plugin for starlark
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
craftcms/ecs
Easy Coding Standard configurations for Craft CMS projects.
MITJul 30, 2026 · metrics 2.10.0
crates.io
crossterm-rs/crossterm-winapi
Crossterm Windows API Abstractions
MITAug 11, 2026 · metrics 2.10.0
npm
gamunu/vscode-opentofu
Visual Studio Code Extension without Terraform Cloud and Telemetry
MPL-2.0Jul 31, 2026 · metrics 2.10.0
npm
iarna/has-unicode
Try to guess if your terminal supports unicode
ISCAug 31, 2026 · metrics 2.10.0
—
jawabuu/kloud-3s
Bootstrap a simple, secure kubernetes deployment on public cloud providers using terraform and k3s.
MITAug 3, 2026 · metrics 2.10.0
npm
microsoft/use-disposable
Creating instances in React during render that need to be disposed even with StrictMode
MITSep 4, 2026 · metrics 2.10.0
—
oakserver/media_types
Deprecated. Use std/media_types instead.
MITJul 19, 2026 · metrics 2.10.0
—
oxen-io/libsession-util
Session utilities library
GPL-3.0Aug 23, 2026 · metrics 2.10.0
Packagist
pburggraf/CRC
Cyclic redundancy checker class
MITJul 28, 2026 · metrics 2.10.0