Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,575
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
579B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Hex
xward/phoenix_ddos
ddos protection for elixir phoenix project
Apache-2.0Aug 1, 2026 · metrics 2.10.0
npm
zhs007/getcomic
getcomic - 漫画打包器
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Maven
BMDSoftware/neji
Flexible and powerful platform for biomedical information extraction from text
No licenseAug 1, 2026 · metrics 2.10.0
crates.io
Isaac-Lozano/radx
An ADX encoder/decoder written in Rust.
MITAug 21, 2026 · metrics 2.10.0
Packagist
blancks/fast-jsonpatch-php
Class designed to handle JSON Patch operations in accordance with the RFC 6902 specification
MITSep 8, 2026 · metrics 2.10.0
RubyGems
coderanger/rspec-command
rspec-command is a helper module for using RSpec to test command-line applications.
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
dfm/kplr
Tools for working with Kepler data using Python
MITSep 6, 2026 · metrics 2.10.0
Maven
ethlo/itu
An extremely fast parser and formatter of standardized date and date-times supporting RFC-3339 (ISO-8601 profile) and more.
Apache-2.0Aug 21, 2026 · metrics 2.10.0
Maven
freshollie/monkeyboard-radio-android
Monkeyboard - FM & DAB/DAB+ radio for android
GPL-3.0Aug 4, 2026 · metrics 2.10.0
PyPI
gsnedders/python-webencodings
Character encoding for the web.
Custom licenseSep 9, 2026 · metrics 2.10.0
npm
mediachain/aleph
א: The mediachain universe manipulation engine
MITJul 21, 2026 · metrics 2.10.0
PyPI
microsoft/jschema-to-python
Generate source code for a set of Python classes from a JSON schema.
MITAug 19, 2026 · metrics 2.10.0
Packagist
symplify/phpstan-extensions
'ignore' error format, solid Symfony SplFileInfo and other useful extensions for PHPStan
MITJul 22, 2026 · metrics 2.10.0
PyPI
thobbs/pure-sasl
A pure python SASL client
MITAug 22, 2026 · metrics 2.10.0
npm
yargs/set-blocking
set blocking stdio and stderr ensuring that terminal output does not truncate
ISCAug 4, 2026 · metrics 2.10.0
npm · RubyGems
18F/federalist-uswds-jekyll
Reference implementation of USWDS 2.0 for Jekyll on Cloud.gov. Demo ->
Custom licenseJul 18, 2026 · metrics 2.10.0
PyPI
PDBeurope/pdbecif
A lightweight pure python package for reading, writing and manipulating mmCIF files distributed by the wwPDB"
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Packagist
PrestaShop/circuit-breaker
A resilient PHP library that allows to safely make calls to external services
MITJul 25, 2026 · metrics 2.10.0
Go
ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
MITAug 4, 2026 · metrics 2.10.0
Hex
dashbitco/nimble_strftime
A simple and fast strftime-based datetime formatter
No licenseJul 18, 2026 · metrics 2.10.0
RubyGems
discourse/discourse_theme
CLI helper for developing Discourse themes
MITAug 22, 2026 · metrics 2.10.0
crates.io
rust-vmm/vm-device
No repository description published.
Apache-2.0Sep 4, 2026 · metrics 2.10.0
npm
tripolskypetr/agent-swarm-kit
A TypeScript library for building orchestrated framework-agnostic multi-agent AI systems
MITJul 24, 2026 · metrics 2.10.0
Go
yitter/idgenerator-go
idgenerator 的 Go 专项引用库。
MITSep 6, 2026 · metrics 2.10.0
—
Cycling74/max-api
Low-level C-language application programming interface for Max
Custom licenseAug 1, 2026 · metrics 2.10.0
npm
Eyevinn/hls-ts-js
HLS MPEG-TS parser library in Javascript
Custom licenseJul 27, 2026 · metrics 2.10.0
npm
TooTallNate/util-deprecate
The Node.js `util.deprecate()` function with browser support
MITAug 4, 2026 · metrics 2.10.0
PyPI
alessiosavi/PyRecognizer
"A neural network to rule them all, a neural network to find them, a neural network to bring them all and verify if is you !!" (Face recognition tool)
MITSep 1, 2026 · metrics 2.10.0
PyPI
andrewguy/biostructmap
A Python package for mapping sequence aligned data onto protein structures
MITSep 9, 2026 · metrics 2.10.0
npm
appcues/snabbdom-virtualize
Library for turning strings and DOM nodes into virtual DOM nodes compatible with snabbdom.
MITSep 7, 2026 · metrics 2.10.0