Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,364
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
gemini-testing/testplane
Testplane (ex-hermione) browser test runner based on mocha and wdio
MITSep 13, 2026 · metrics 2.10.0
npm
gemini-testing/looks-same
Node.js library for comparing images
MITSep 29, 2026 · metrics 2.10.0
—
rairprotocol/dev-dapp-season1
Learn how to deploy open-source Dapps while participating in our incentives program
GPL-3.0Sep 12, 2026 · metrics 2.10.0
Packagist
defstudio/telegraph
Telegraph is a Laravel package for fluently interacting with Telegram Bots
MITSep 12, 2026 · metrics 2.10.0
Hex
elixir-waffle/waffle
Flexible file upload and attachment library for Elixir
No licenseSep 9, 2026 · metrics 2.10.0
Packagist
JBZoo/Utils
Collection of useful PHP functions, mini-classes, and snippets for every day.
MITSep 12, 2026 · metrics 2.10.0
npm · PyPI
invergent-ai/surogate
Train and serve LLMs at extreme speed and massive throughput.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm · Go
vshulcz/deja-vu
One memory shared by Claude Code, Codex, Cursor, Copilot CLI, OpenClaw and 20 more coding agents, built from the session history already on disk. A fix found in one agent comes back in any of them, including months of sessions from before you installed it. No LLM, no embeddings, one local Go binary.
MITSep 12, 2026 · metrics 2.10.0
Go
lesovsky/noisia
Harmful workload generator for PostgreSQL
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
npm
tabrindle/envinfo
Generate a report about your development environment for debugging and issue reporting
MITOct 20, 2026 · metrics 2.10.0
RubyGems
Envek/after_commit_everywhere
Use ActiveRecord transactional callbacks outside of models, literally everywhere in your application.
MITSep 11, 2026 · metrics 2.10.0
npm
iNavFlight/inav-configurator
No repository description published.
GPL-3.0Sep 15, 2026 · metrics 2.10.0
crates.io
RustCrypto/block-ciphers
Collection of block cipher algorithms written in pure Rust
No licenseAug 27, 2026 · metrics 2.10.0
NuGet · npm
OrleansContrib/OrleansDashboard
:bar_chart: A developer dashboard for Microsoft Orleans
MITSep 11, 2026 · metrics 2.10.0
PyPI
Cyberdrop-DL/cyberdrop-dl
Bulk asynchronous downloader for multiple file hosts
GPL-3.0Oct 17, 2026 · metrics 2.10.0
PyPI · npm
mindsdb/anton
self-improving agent
MITOct 19, 2026 · metrics 2.10.0
crates.io
RustCrypto/traits
Collection of cryptography-related traits
No licenseSep 16, 2026 · metrics 2.10.0
npm
expo/vector-icons
No repository description published.
MITOct 22, 2026 · metrics 2.10.0
RubyGems
DmitryTsepelev/ar_lazy_preload
Lazy loading associations for the ActiveRecord models
MITSep 11, 2026 · metrics 2.10.0
PyPI
ispras/dedoc
Dedoc is a library (service) for automate documents parsing and bringing to a uniform format. It automatically extracts content, logical structure, tables, and meta information from textual electronic documents. (Parse document; Document content extraction; Logical structure extraction; PDF parser; Scanned document parser; DOCX parser; HTML parser
Apache-2.0Oct 19, 2026 · metrics 2.10.0
RubyGems
peterc/whatlanguage
Pure Ruby natural language detection library for 160+ languages.
Custom licenseSep 12, 2026 · metrics 2.10.0
RubyGems · npm
rmagick/rmagick
Ruby bindings for ImageMagick
MITSep 11, 2026 · metrics 2.10.0
Maven
odnoklassniki/one-nio
Unconventional I/O library for Java
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
intel/intel-graphics-compiler
No repository description published.
Custom licenseSep 12, 2026 · metrics 2.10.0
Maven
SciProgCentre/kmath
Kotlin mathematics extensions library
Custom licenseSep 13, 2026 · metrics 2.10.0
Packagist
niklasravnsborg/laravel-pdf
📄 Laravel PDF
No licenseOct 8, 2026 · metrics 2.10.0
NuGet
melanchall/drywetmidi
Swiss knife for everything MIDI related
MITSep 18, 2026 · metrics 2.10.0
RubyGems
chef/ohai
Ohai profiles your system and emits JSON
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
microsoft/typed-rest-client
Node Rest and Http Clients with typings for use with TypeScript
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
anywherelan/awl
Securely connect your devices into a private network. Mesh VPN, socks5 proxy server/client
MPL-2.0Sep 13, 2026 · metrics 2.10.0