Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,482
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
gazpachoking/jsonref
Automatically dereferences JSON references within a JSON document.
MITAug 29, 2026 · metrics 2.10.0
npm
green-api/whatsapp-api-client-js
This library helps you easily create a javascript application with Whatsapp support
MITJul 20, 2026 · metrics 2.10.0
npm
yargs/y18n
:ledger: the bare-bones i18n library used by yargs
ISCAug 4, 2026 · metrics 2.10.0
PyPI
plotly/dash-html-components
OBSOLETE - now part of https://github.com/plotly/dash
Custom licenseJul 30, 2026 · metrics 2.10.0
crates.io
L4z3x/mal-cli
Terminal Interface for the official MyAnimeList api.
MITJul 26, 2026 · metrics 2.10.0
PyPI
d5h-foss/grpc-interceptor
Simplified Python gRPC interceptors
MITAug 27, 2026 · metrics 2.10.0
Packagist
gasparesganga/php-shapefile
PHP library to read and write ESRI Shapefiles, compatible with WKT and GeoJSON
MITAug 25, 2026 · metrics 2.10.0
RubyGems
mattbrictson/chandler
[unmaintained] chandler syncs your CHANGELOG entries to GitHub's release notes
MITJul 20, 2026 · metrics 2.10.0
Go
ovh/go-ovh
Simple go wrapper for the OVH API
BSD-3-ClauseSep 9, 2026 · metrics 2.10.0
npm
psinetron/echoes-vault-opencode
Persistent memory plugin for OpenCode. Obsidian-style knowledge base that survives across sessions
MITJul 20, 2026 · metrics 2.10.0
Go · npm · PyPI
Dan6erbond/share-me
An image and video hosting platform for your server, with rich embed support and API.
MITAug 22, 2026 · metrics 2.10.0
PyPI
elemental-lf/benji
Benji Backup: A block based deduplicating backup software for Ceph RBD images, iSCSI targets, image files and block devices
Custom licenseAug 14, 2026 · metrics 2.10.0
npm
fitzgen/glob-to-regexp
Convert a glob to a regular expression
No licenseAug 4, 2026 · metrics 2.10.0
Packagist · npm
spiritix/php-chrome-html2pdf
A PHP library for converting HTML to PDF using Google Chrome
MITJul 29, 2026 · metrics 2.10.0
PyPI
google/python_portpicker
A module to find available network ports for testing.
Apache-2.0Jul 18, 2026 · metrics 2.10.0
npm
mafintosh/end-of-stream
Call a callback when a readable/writable/duplex stream has completed or failed.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
svoop/autotest-growl
Next generation Growl support for autotest.
MITJul 22, 2026 · metrics 2.10.0
PyPI
DeepRank/deeprank
This repository has been integrated in https://github.com/DeepRank/deeprank2
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
ai/check-dts
Unit tests for TypeScript definitions in your JS open source library
MITJul 27, 2026 · metrics 2.10.0
Packagist
tddwizard/magento2-fixtures
Fixture library for Magento 2 integration tests by @schmengler (@integer-net)
MITSep 8, 2026 · metrics 2.10.0
Packagist · npm
valu-digital/wp-graphql-polylang
WPGraphQL Polylang Extension for WordPress
GPL-2.0Aug 6, 2026 · metrics 2.10.0
Packagist
wamania/php-stemmer
Native PHP Stemmer
MITAug 13, 2026 · metrics 2.10.0
PyPI
nalgeon/sqlean.py
Python's sqlite3 + extensions
ZlibJul 21, 2026 · metrics 2.10.0
—
niv/neverwinter.nim
CLI tools and nim library used in Neverwinter Nights: Enhanced Edition development
MITJul 25, 2026 · metrics 2.10.0
Maven
pgcodekeeper/pgcodekeeper
Eclipse plugin for database schema management
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
svenkreiss/socialforce
Differentiable Social Force simulation with universal interaction potentials.
MITSep 5, 2026 · metrics 2.10.0
PyPI
antigenomics/vdjtools
Analysis of immune repertoire sequencing results
GPL-3.0Jul 30, 2026 · metrics 2.10.0
npm
calvinmetcalf/immediate
cross browser microtask
MITAug 31, 2026 · metrics 2.10.0
npm
felixge/node-combined-stream
A stream that emits multiple other streams one after another.
MITAug 4, 2026 · metrics 2.10.0
npm
karthikuj/sasori
Sasori is a dynamic web crawler powered by Puppeteer, designed for lightning-fast endpoint discovery.
MITAug 4, 2026 · metrics 2.10.0