Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,766
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
davidbonnet/astring
🌳 Tiny and fast JavaScript code generator from an ESTree-compliant AST.
MITAug 13, 2026 · metrics 2.10.0
PyPI
google/textfsm
Python module for parsing semi-structured text into python tables.
Apache-2.0Aug 8, 2026 · metrics 2.10.0
PyPI
piskvorky/sqlitedict
Persistent dict, backed by sqlite3 and pickle, multithread-safe.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
thomasloven/lovelace-layout-card
🔹 Get more control over the placement of lovelace cards.
MITJul 27, 2026 · metrics 2.10.0
npm
google-gemini/deprecated-generative-ai-js
This SDK is now deprecated, use the new unified Google GenAI SDK.
Apache-2.0Aug 9, 2026 · metrics 2.10.0
PyPI
Polymarket/py-clob-client
Python client for the Polymarket CLOB
MITAug 13, 2026 · metrics 2.10.0
npm
zertosh/invariant
invariant
MITAug 13, 2026 · metrics 2.10.0
PyPI
html5lib/html5lib-python
Standards-compliant library for parsing and serializing HTML documents and fragments in Python
MITAug 27, 2026 · metrics 2.10.0
PyPI · Go
allwefantasy/auto-coder
No repository description published.
Apache-2.0Aug 1, 2026 · metrics 2.10.0
Go
evanphx/json-patch
A Go library to apply RFC6902 patches and create and apply RFC7386 patches
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
RubyGems
igrigorik/em-http-request
Asynchronous HTTP Client (EventMachine + Ruby)
No licenseJul 21, 2026 · metrics 2.10.0
Go
kudobuilder/kudo
Kubernetes Universal Declarative Operator (KUDO)
Apache-2.0Aug 9, 2026 · metrics 2.10.0
PyPI
arundo/adtk
A Python toolkit for rule-based/unsupervised anomaly detection in time series
MPL-2.0Aug 13, 2026 · metrics 2.10.0
Maven
jmrozanec/cron-utils
Cron utils for parsing, validations and human readable descriptions as well as date/time interoperability.
Apache-2.0Aug 21, 2026 · metrics 2.10.0
—
tmux-plugins/tmux-copycat
A plugin that enhances tmux search
MITAug 22, 2026 · metrics 2.10.0
npm
floating/frame
System-wide Web3 for macOS, Windows and Linux
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
uber-go/multierr
Combine one or more Go errors together
MITAug 22, 2026 · metrics 2.10.0
PyPI
helloflask/bootstrap-flask
Bootstrap 4 & 5 helper for your Flask projects.
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-verror
Rich JavaScript errors
MITAug 13, 2026 · metrics 2.10.0
RubyGems
email-spec/email-spec
Collection of RSpec/MiniTest matchers and Cucumber steps for testing email in a ruby app using ActionMailer or Pony
MITJul 21, 2026 · metrics 2.10.0
PyPI
ROCm/MIOpen
[DEPRECATED] Moved to ROCm/rocm-libraries repo
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
SukkaW/nolyfill
Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
MITAug 13, 2026 · metrics 2.10.0
npm
pmndrs/its-fine
🐶🔥 A collection of escape hatches for React.
MITAug 13, 2026 · metrics 2.10.0
npm
marnusw/date-fns-tz
Complementary library for date-fns v2 adding IANA time zone support
MITAug 13, 2026 · metrics 2.10.0
npm
developit/web-worker
Consistent Web Workers in browser and Node.
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
No licenseAug 13, 2026 · metrics 2.10.0
npm
benjamn/ast-types
Esprima-compatible implementation of the Mozilla JS Parser API
MITAug 4, 2026 · metrics 2.10.0
npm
moxystudio/node-cross-spawn
A cross platform solution to node's spawn and spawnSync
MITAug 4, 2026 · metrics 2.10.0
RubyGems
carmen-ruby/carmen
A repository of geographic regions for Ruby
Custom licenseJul 22, 2026 · metrics 2.10.0
PyPI
GaParmar/clean-fid
PyTorch - FID calculation with proper image resizing and quantization steps [CVPR 2022]
MITAug 13, 2026 · metrics 2.10.0