Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,167
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
Sunbird-inQuiry/player
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
—
SwissDataScienceCenter/renku-search
No repository description published.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
TRowbotham/idna
An implementation of UTS#46 Unicode IDNA Compatibility Processing.
MITOct 9, 2026 · metrics 2.10.0
npm · Maven
TapResearch/react-native-tapresearch
A react native plugin for TapResearch
No licenseSep 14, 2026 · metrics 2.10.0
npm
TheThingsNetwork/eslint-config-ttn
Eslint config for use within The Things Network
MITSep 17, 2026 · metrics 2.10.0
—
Tinkerforge/thermal-imaging-bricklet
80x60 pixel thermal imaging camera
No licenseOct 18, 2026 · metrics 2.10.0
npm
Uauy-Lab/biojs-vis-expression-bar
No repository description published.
MITOct 25, 2026 · metrics 2.10.0
NuGet
VirtoCommerce/vc-module-webhooks
Webhooks functionality - Enables real-time event-driven notifications within the Virto Commerce platform
Custom licenseOct 2, 2026 · metrics 2.10.0
Go
Wind-River/ccli
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
—
adbancroft/avr-fast-div
Optimized integer division for AVR hardware
LGPL-2.1Oct 22, 2026 · metrics 2.10.0
crates.io
addr-rs/psl-types
Common types for the public suffix implementation crates
MITOct 20, 2026 · metrics 2.10.0
Go
adobe/thanos
Highly available Prometheus setup with long term storage capabilities.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
advanced-rising/task-management
No repository description published.
No licenseSep 16, 2026 · metrics 2.10.0
Go
aellwein/terraform-provider-universe
A generic Terraform Provider with which you can code dynamic providers in any scripting language.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
—
aergoio/luajit
Modified LuaJIT engine used on Aergo
Custom licenseSep 12, 2026 · metrics 2.10.0
—
agentzh/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
No licenseSep 13, 2026 · metrics 2.10.0
Go
alibabacloud-go/endpoint-util
Alibaba Cloud Endpoint Util for Go
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Packagist
alibabacloud-sdk-php/darabonba-openapi
No repository description published.
No licenseSep 17, 2026 · metrics 2.10.0
PyPI · npm · Maven +2
aliyun/endpoint-util
No repository description published.
No licenseOct 24, 2026 · metrics 2.10.0
PyPI
andrewlee1807/DelayNet
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
Go
andreychh/tgen
Turns the Telegram Bot API HTML documentation into ready-to-use API bindings.
MITSep 12, 2026 · metrics 2.10.0
Go · npm
anmaslov/simple-rag
No repository description published.
No licenseOct 19, 2026 · metrics 2.10.0
PyPI
apify/apify-shared-python
Constants and utilities shared across Apify's Python libraries and projects.
Apache-2.0Oct 12, 2026 · metrics 2.10.0
—
appbaseio/transporter
Sync data between persistence engines, like ETL only not stodgy
BSD-3-ClauseOct 4, 2026 · metrics 2.10.0
PyPI · npm
arazshah/smart_spatial_system
Plugin-based GeoAI system: natural-language questions become QuerySpecs, DAG plans and map layers, tables and PDF reports. Built on geochat-platform.
MITOct 22, 2026 · metrics 2.10.0
RubyGems
arthurschreiber/rugged
ruby bindings to libgit2
MITOct 18, 2026 · metrics 2.10.0
PyPI
ask/sphinx2rst
Convert basic Sphinx format to reStructuredText.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
askalf/deepdive
Local research agent — one command, a cited answer with its trust signals: source-authority mix, lexical citation verification, confidence, cost. CLI + MCP server. Runs on your own LLM router; nightly public report card. Zero hosted dependencies.
MITSep 14, 2026 · metrics 2.10.0
—
atomicbelle/Sandbox
No repository description published.
No licenseSep 16, 2026 · metrics 2.10.0
npm
audiojs/loudness
Loudness metering — umbrella for @audio/loudness-* atoms (BS.1770-4 LUFS, true peak, LRA, ReplayGain, DR, speech contrast, sound labeling)
Custom licenseSep 18, 2026 · metrics 2.10.0