Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,178
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
SanjulaGanepola/github-local-actions
✨ Run your GitHub Actions locally in VS Code!
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
mozilla/node-client-sessions
secure sessions stored in cookies
MPL-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
suchow/Dissertate
Beautiful LaTeX dissertation templates.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
aws-samples/aws-secure-environment-accelerator
ASEA developer support has ended, and the ASEA github repo will be marked Archived (read-only) by the end of 2025.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
django-ordered-model/django-ordered-model
Get your Django models in order
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
opentracing/opentracing-python
OpenTracing API for Python. 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
dirs-dev/dirs-rs
moved to https://codeberg.org/dirs/dirs-rs
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
src-d/proteus
Generate .proto files from Go source code.
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
fluxninja/aperture
Rate limiting, caching, and request prioritization for modern workloads
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
adilmohak/django-lms
A learning management system using django web framework. Course add and drop, grade and assessment result management, online quiz, report generator, student and lecturers management, dashboard, and so much more...
MITSep 19, 2026 · metrics 2.10.0
Go
chai2010/webp
WebP decoder and encoder for Go (Zero Dependencies). 该项目不再维护, 大家自己fork吧
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
PyPI
gaogaotiantian/objprint
A library that can print Python objects in human readable format
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
pelotom/use-methods
A simpler way to useReducers
MITSep 19, 2026 · metrics 2.10.0
Packagist
php-gettext/Gettext
PHP library to collect and manipulate gettext (.po, .mo, .php, .json, etc)
MITSep 18, 2026 · metrics 2.10.0
npm
davidmarkclements/rfdc
Really Fast Deep Clone
MITSep 16, 2026 · metrics 2.10.0
npm · NuGet
Lachee/discord-rpc-csharp
C# custom implementation for Discord Rich Presence. Not deprecated and still available!
MITSep 16, 2026 · metrics 2.10.0
Go
budimanjojo/talhelper
A tool to help creating Talos kubernetes cluster
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
—
johnmcfarlane/cnl
A Compositional Numeric Library for C++
BSL-1.0Sep 16, 2026 · metrics 2.10.0
Go
benbjohnson/clock
Clock is a small library for mocking time in Go.
MITSep 16, 2026 · metrics 2.10.0
Go
firecracker-microvm/firecracker-go-sdk
An SDK in Go for the Firecracker microVM API
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
mthcht/ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
No licenseSep 16, 2026 · metrics 2.10.0
npm
dominictarr/through
simple way to create a ReadableWritable stream that works
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
lyft/protoc-gen-star
protoc plugin library for efficient proto-based code generation
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
acornjs/acorn-jsx
Alternative, faster React.js JSX parser
MITSep 16, 2026 · metrics 2.10.0
Go
github/vulcanizer
GitHub's ops focused Elasticsearch library
MITSep 19, 2026 · metrics 2.10.0
crates.io
nvzqz/static-assertions
Ensure correct assumptions about constants, types, and more in Rust
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
dart-archive/mockito
Mockito-inspired mock library for Dart
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
JuliaReinforcementLearning/ReinforcementLearning.jl
A reinforcement learning package for Julia
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
abhirooptalasila/AutoSub
A CLI script to generate subtitle files (SRT/VTT/TXT) for any video using either DeepSpeech or Coqui
MITSep 16, 2026 · metrics 2.10.0
crates.io
RazrFalcon/pico-args
An ultra simple CLI arguments parser.
MITSep 18, 2026 · metrics 2.10.0