Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,627
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist · RubyGems
SocialConnect/auth
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
MITJul 23, 2026 · metrics 2.10.0
Packagist
thephpleague/openapi-psr7-validator
It validates PSR-7 messages (HTTP request/response) against OpenAPI specifications
MITAug 13, 2026 · metrics 2.10.0
npm
Koenkk/zigbee-herdsman
A Node.js Zigbee library
MITAug 3, 2026 · metrics 2.10.0
—
KeRNeLith/QuikGraph
Generic Graph Data Structures and Algorithms for .NET
MS-PLJul 18, 2026 · metrics 2.10.0
Maven
MichaelRocks/libphonenumber-android
Android port of Google's libphonenumber
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Packagist
samdark/sitemap
Sitemap and sitemap index builder
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
siberiacancode/reactuse
🌌 reactuse the largest and most useful hook library
MITJul 22, 2026 · metrics 2.10.0
Go
sethvargo/go-githubactions
Go SDK for GitHub Actions - easily author GitHub Actions in Go
Apache-2.0Jul 22, 2026 · metrics 2.10.0
RubyGems
brianmario/escape_utils
Faster string escaping routines for your ruby apps
MITJul 22, 2026 · metrics 2.10.0
Go
flant/addon-operator
A system to manage additional components for Kubernetes cluster in a simple, consistent and automated way.
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Packagist
roadrunner-php/laravel-bridge
Complete Laravel integration for RoadRunner with support for HTTP, Jobs, gRPC, and Temporal plugins - going beyond Octane's capabilities
MITAug 13, 2026 · metrics 2.10.0
crates.io
gtk-rs/gtk3-rs
Rust bindings for GTK 3
MITAug 13, 2026 · metrics 2.10.0
—
Taritsyn/WebMarkupMin
The Web Markup Minifier (abbreviated WebMarkupMin) - a .NET library that contains a set of markup minifiers. The objective of this project is to improve the performance of web applications by reducing the size of HTML, XHTML and XML code.
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Go
ozontech/file.d
A blazing fast tool for building data pipelines: read, process and output events. Our community: https://t.me/file_d_community
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
NuGet
WildGums/Orchestra
Orchestra is a composable shell and WPF framework built on top of Catel
Custom licenseJul 25, 2026 · metrics 2.10.0
PyPI
voronind/awesome-slugify
Python flexible slugify function
No licenseJul 30, 2026 · metrics 2.10.0
crates.io
servo/euclid
Geometry primitives (basic linear algebra) for Rust
Custom licenseAug 11, 2026 · metrics 2.10.0
Packagist
php-http/curl-client
cURL client
MITAug 4, 2026 · metrics 2.10.0
npm
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
MITAug 31, 2026 · metrics 2.10.0
NuGet
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
Custom licenseAug 4, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-authclient
Yii 2 authclient extension.
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
npm
Netflix-Skunkworks/stethoscope-app
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
MITJul 25, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-redis
Yii 2 Redis extension.
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
Go
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
MITAug 2, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenDJ
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
Custom licenseJul 25, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-httpclient
Yii 2 HTTP client
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
RubyGems
sporkmonger/uuidtools
A simple universally unique ID generation library.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI · crates.io
awolverp/cachebox
The fastest memoizing and caching Python library written in Rust.
MITAug 27, 2026 · metrics 2.10.0