Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,785
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
cyrusbiotechnology/dj-protein
Django utilities and tools for protein storage and manipulation
MITJul 15, 2026 · metrics 2.10.0
Go
dfinity/terraform-provider-ic
A Terraform provider for provisioning Internet Computer canisters
Apache-2.0Jul 31, 2026 · metrics 2.10.0
Go
ecnepsnai/ds
A key-value store with hash indexes
MITJul 25, 2026 · metrics 2.10.0
—
evalplus/humanevalplus_release
Release repository for HumanEval+ data
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
grantila/list-open-files
lsof for Node.js
MITAug 24, 2026 · metrics 2.10.0
Go
hexops/gotextdiff
Unified text diffing in Go (copy of the internal diffing packages the officlal Go language server uses)
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
npm
hs85jeong/korean-lotto
No repository description published.
No licenseSep 5, 2026 · metrics 2.10.0
crates.io
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
jridgewell/set-array
No repository description published.
MITAug 4, 2026 · metrics 2.10.0
npm
justinmc/tiny-molecule
A small, developer-friendly 3D molecule viewer for the modern web
MITSep 8, 2026 · metrics 2.10.0
npm
mafintosh/mkdirp-classic
Mirror of mkdirp 0.5.2
MITAug 31, 2026 · metrics 2.10.0
—
maplibre/maplibre-native-base
MapLibre Native Base C++ Libraries
BSD-3-ClauseAug 22, 2026 · metrics 2.10.0
Go
michaelrampl/commity
Make writing commit messages fun again.
No licenseAug 22, 2026 · metrics 2.10.0
—
newrelic/nuget-azure-cloud-services
The nuget package for x64 apps (VMs or Cloud Services - Web Roles | Worker Roles) running on Windows Azure
MITJul 29, 2026 · metrics 2.10.0
—
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
MITJul 24, 2026 · metrics 2.10.0
PyPI
scieloorg/ioisis
I/O for ISIS files in Python
BSD-2-ClauseAug 24, 2026 · metrics 2.10.0
npm
sinonjs/commons
Simple functions shared among the sinon end user libraries
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITAug 4, 2026 · metrics 2.10.0
RubyGems
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
MITAug 21, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
MITAug 23, 2026 · metrics 2.10.0
Packagist
Automattic/sqlite-database-integration
A fork of https://github.com/WordPress/sqlite-database-integration/.
GPL-2.0Jul 25, 2026 · metrics 2.10.0
Go
AzureAD/microsoft-authentication-extensions-for-go
Secure cross-platform token cache for MSAL public client apps
MITJul 27, 2026 · metrics 2.10.0
Go
Bedrock-OSS/go-burrito
No repository description published.
MITAug 1, 2026 · metrics 2.10.0
—
Consensys/go-ethereum
Official golang implementation of the Ethereum protocol
LGPL-3.0Aug 3, 2026 · metrics 2.10.0
RubyGems · crates.io
DataDog/libddprof
libddprof has been renamed to libdatadog and development has moved to https://github.com/datadog/libdatadog
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Go
DataDog/viper
Go configuration with fangs
MITAug 1, 2026 · metrics 2.10.0
Go
Erda-project/Erda-proto-go
Generated code for Erda protobuf data modals and protocols.
Apache-2.0Jul 17, 2026 · metrics 2.10.0