Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,348
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
RubyGems
codegram/date_validator
A simple, ORM agnostic, Ruby >=2.2 compatible date validator for Rails, based on ActiveModel.
MITJul 22, 2026 · metrics 2.10.0
npm
component/escape-html
Escape string for use in HTML
MITAug 4, 2026 · metrics 2.10.0
PyPI
lericson/pylibmc
A Python wrapper around the libmemcached interface from TangentOrg.
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
PyPI
voronind/awesome-slugify
Python flexible slugify function
No licenseJul 30, 2026 · metrics 2.10.0
crates.io
BurntSushi/termcolor
Cross platform terminal colors for Rust.
UnlicenseAug 8, 2026 · metrics 2.10.0
crates.io
servo/euclid
Geometry primitives (basic linear algebra) for Rust
Custom licenseAug 11, 2026 · metrics 2.10.0
PyPI
intake/python-snappy
Python bindings for the snappy google library
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
pavlov99/json-rpc
🔁 JSON-RPC 1/2 transport implementation. Supports python 2/3 and pypy.
MITAug 4, 2026 · metrics 2.10.0
PyPI
bontchev/pcodedmp
A VBA p-code disassembler
GPL-3.0Aug 8, 2026 · metrics 2.10.0
PyPI
sybrenstuvel/python-rsa
Python-RSA is a pure-Python RSA implementation.
Custom licenseJul 20, 2026 · metrics 2.10.0
npm
vladikoff/netflix-1080p-firefox
🍿 Force 1080p Netflix playback in Firefox
No licenseJul 22, 2026 · metrics 2.10.0
Packagist
sensiolabs/SensioDistributionBundle
Base bundle for Symfony Distributions
MITJul 25, 2026 · metrics 2.10.0
npm
stacktracejs/error-stack-parser
Extract meaning from JS Errors
MITAug 31, 2026 · metrics 2.10.0
Hex
cpjk/canary
:hatching_chick: Elixir authorization and resource-loading library for Plug applications.
MITSep 9, 2026 · metrics 2.10.0
crates.io
ogham/rust-ansi-term
Rust library for ANSI terminal colours and styles (bold, underline)
MITAug 13, 2026 · metrics 2.10.0
Packagist
php-http/curl-client
cURL client
MITAug 4, 2026 · metrics 2.10.0
npm
astracompiler/cli
🚀 Fast, reliable and easy-to-use js-to-exe compiler.
MITAug 1, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITAug 31, 2026 · metrics 2.10.0
—
avishorp/TM1637
Arduino library for TM1637 (LED Driver)
LGPL-3.0Aug 22, 2026 · metrics 2.10.0
npm
visionmedia/bytes.js
node byte string parser
MITAug 4, 2026 · metrics 2.10.0
NuGet
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
patrys/httmock
A mocking library for requests
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
ricmoo/pyaes
Pure-Python implementation of AES block-cipher and common modes of operation.
MITAug 27, 2026 · metrics 2.10.0
PyPI · Maven
grpc-ecosystem/grpc-opentracing
OpenTracing is a set of consistent, expressive, vendor-neutral APIs for distributed tracing and context propagation
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-authclient
Yii 2 authclient extension.
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
Packagist
webmozart/path-util
A robust cross-platform utility for normalizing, comparing and modifying file paths.
MITJul 30, 2026 · metrics 2.10.0
crates.io
mcarton/rust-derivative
A set of alternative `derive` attributes for Rust
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
meilisearch/milli
Search engine library for Meilisearch ⚡️
MITJul 26, 2026 · metrics 2.10.0
Maven
torvalds/subsurface-for-dirk
Do not use - the real upstream is Subsurface-divelog/subsurface
GPL-2.0Jul 27, 2026 · metrics 2.10.0