Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,139
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
dfinance/dvm
dfinance Virtual Machine for Move language
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
spiral/attributes
PHP Attributes Reader. Subtree split of the Spiral Attributes component (see spiral/framework)
MITSep 18, 2026 · metrics 2.10.0
PyPI
chihongze/shard.py
shard.py 是在web.py数据库访问模块的基础上增加了读写分离、shard以及ORM的功能
No licenseSep 16, 2026 · metrics 2.10.0
npm
postcss/postcss-parser-tests
Base tests for every PostCSS CSS parser
MITSep 18, 2026 · metrics 2.10.0
—
3F/hMSBuild
.bat scripts with full Package Manager inside for searching and wrapping MSBuild tools. All Visual Studio and .NET Framework versions
MITSep 19, 2026 · metrics 2.10.0
npm
MrRefactoring/trello.js
Type-safe Trello REST API client for TypeScript & JavaScript. ESM-only, tree-shakable, runtime-validated by Zod 4. Full coverage of boards, cards, lists, checklists, members, webhooks, organizations. Atlassian Trello SDK for Node.js 22+ and modern browsers.
MITSep 19, 2026 · metrics 2.10.0
Go
ehmo/gomoufox
Go library, CLI, and MCP server for Camoufox browser automation.
Custom licenseSep 15, 2026 · metrics 2.10.0
Packagist
roadrunner-php/worker
Base PHP worker for RoadRunner server.
MITSep 18, 2026 · metrics 2.10.0
—
3F/7z.Libs
📦📦 🗜 An automated build of the `7z.Libs` NuGet packages.
MITSep 17, 2026 · metrics 2.10.0
—
OpenMiNET/OpenMiNET
Custom MiNET Plugin API - Making it easier for multiple plugins to work together nicely.
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
Akurganow/use-persisted-state
React useState hook with persistence to localStorage, sessionStorage, and extension storage (chrome.storage / browser.storage)
MITSep 18, 2026 · metrics 2.10.0
Go
go-toolsmith/astcopy
Package astcopy implements Go AST deep copy operations.
MITSep 16, 2026 · metrics 2.10.0
Go
vadiminshakov/marti
Go trading bot (DCA & AI strategies, crypto, Binance, Bybit)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · PyPI
ekhodzitsky/polyvoice
Speaker diarization for Rust — who spoke when, on CPU, without Python. INT8 kernels (~8.4 MB, MIT, ungated). Rust, Python, C FFI, and CLI.
MITSep 18, 2026 · metrics 2.10.0
crates.io · npm
paritytech/polkadot-bulletin-chain
The Bulletin Chain is a parachain providing distributed data storage and retrieval infrastructure for the Polkadot ecosystem.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
gravity-ui/onboarding
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
—
norksec/torcrack
A simple Tor enabled, multi-process SSH dictionary attack in Python3.
No licenseSep 16, 2026 · metrics 2.10.0
Go
tsung-sc/Tsung-Go-shopping-project
GO语言开发的一个WEB商城项目，采用的框架为BEEGO
MITSep 16, 2026 · metrics 2.10.0
Go · npm
vmkteam/reviewer
Review your PR via Claude Code/Codex/Opencode/LLM
No licenseSep 20, 2026 · metrics 2.10.0
npm
CapMonsterCloud/capmonster-nodejs-captcha-solver
Official Node.js / TypeScript SDK for CapMonster Cloud. Bypass reCAPTCHA, Cloudflare Turnstile, DataDome in Puppeteer and Playwright scripts.
MITSep 15, 2026 · metrics 2.10.0
Packagist
Codeception/base
Base Codeception distribution with minimal set of dependencies (excluding WebDriver and Guzzle)
MITSep 17, 2026 · metrics 2.10.0
npm · crates.io
VKCOM/swc-plugin-css-modules
No repository description published.
MITSep 18, 2026 · metrics 2.10.0
—
dapi/memory-bank
Version-controlled context, governance, and delivery flows for coding agents.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
Duzopy/VRChat-Crasher
VRChat Crasher
No licenseSep 16, 2026 · metrics 2.10.0
npm
IPeCompany/SmsPanelV2.TypeScript
TypeScript Package
MITSep 18, 2026 · metrics 2.10.0
crates.io
estin/geosuggest
suggest by name or find nearest by coordinates cities
MITSep 17, 2026 · metrics 2.10.0
Hex
kortirso/chess
Elixir package for playing chess
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
Percona-Lab/pmm-submodules
A repo dedicated to building Percona Monitoring and Management (PMM)
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
Tellarion/webmaxsocket
webmaxsocket
No licenseSep 18, 2026 · metrics 2.10.0
npm
bad4iz/crypto-pro-cadesplugin
JavaScript-библиотека для работы с сертификатами и создания электронной подписи через «КриптоПро ЭЦП Browser plug-in».
MITSep 19, 2026 · metrics 2.10.0