Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,570
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
SocketSomeone/cent.js
👀 Javascript library to communicate with Centrifugo HTTP API
MITOct 10, 2026 · metrics 2.10.0
npm
SocketSomeone/nestjs-hot-shots
🐶 Hot-shots Module for Nest.js Framework
MITOct 9, 2026 · metrics 2.10.0
PyPI
VonderVuflya/Yggdrasil
Durable, local-first memory for AI coding agents over MCP — zero-dependency, curated & semantically de-duped, you own the data (SQLite + Markdown). Works with Claude Code, Codex & any MCP host.
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
crates.io
dapper91/ext-sort-rs
rust external sort algorithm implementation
UnlicenseSep 27, 2026 · metrics 2.10.0
Go
irdkwmnsb/webrtc-grabber
Grabber application for stealthily peeking at other computer's screens
MITOct 21, 2026 · metrics 2.10.0
Packagist
sajya/client
JSON-RPC 2.0 HTTP(S) Client
MITSep 13, 2026 · metrics 2.10.0
Packagist
yiisoft/assets
Assets management
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/cookies
Convenient way to use cookies with PSR-7
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/var-dumper
Helper for dumping variable for debug purposes
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/yii-middleware
Yii-specific middleware
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
Akurganow/use-persisted-state
React useState hook with persistence to localStorage, sessionStorage, and extension storage (chrome.storage / browser.storage)
MITSep 18, 2026 · metrics 2.10.0
Maven
crashinvaders/gdx-lml
:octocat: LibGDX utility libraries.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
findify/findify-js
Findify monorepo
No licenseSep 28, 2026 · metrics 2.10.0
Go
go-toolsmith/astcopy
Package astcopy implements Go AST deep copy operations.
MITSep 16, 2026 · metrics 2.10.0
npm · Go
izzzzzi/agent-assh
SSH workflow helper for LLM agents
MITSep 12, 2026 · metrics 2.10.0
PyPI
ormeilu/avoid-ai-writing-russian
Скилл для ИИ-агентов и CLI на Python/uv: находит и убирает ИИ-стиль в русских текстах (канцелярит, кальки, штампы), проверяет сохранность правки и оценивает текст по фрагментам в духе «Антиплагиата» с калибровкой по вашим отчётам. Русская адаптация avoid-ai-writing.
MITOct 19, 2026 · metrics 2.10.0
Go
vadiminshakov/marti
Go trading bot (DCA & AI strategies, crypto, Binance, Bybit)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
yiisoft/session
A session service, PSR-15 session middleware, and a flash message service which helps use one-time messages.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
airano-ir/skillhub
Open-source marketplace for AI Agent skills
MITOct 20, 2026 · metrics 2.10.0
Hex
alisinabh/live_dashboard_logger
A real-time log page for Phoenix Live Dashboard with multi-node support
MITOct 14, 2026 · metrics 2.10.0
Go · npm
coretrix/hitrix
No repository description published.
GPL-3.0Oct 19, 2026 · metrics 2.10.0
crates.io · PyPI
ekhodzitsky/polyvoice
Speaker diarization for Rust — who spoke when, on CPU, without Python. INT8 kernels (~8.4 MB, MIT, ungated). Rust, Python, C FFI, and CLI.
MITSep 18, 2026 · metrics 2.10.0
Go
snapp-incubator/health-exporter
A prometheus exporter which provides metrics to check remote endpoints health.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
spiral/cycle-bridge
🌉 Cycle ORM v2 bridge to Spiral Framework
MITOct 20, 2026 · metrics 2.10.0
—
ydb-platform/ydb-cpp-sdk
YDB C++ SDK
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Packagist
yiisoft/data-response
No repository description published.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/rbac-db
yiisoft/db adapter for RBAC.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
ExodusOSS/bytes
Data structures handling
MITSep 15, 2026 · metrics 2.10.0
NuGet
StockSharp/Ecng
System framework with utility projects. Used by StockSharp platform
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
afonasev/flake8-plugin-utils
The package provides base classes and utils for flake8 plugin writing
MITSep 14, 2026 · metrics 2.10.0