Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,775
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
webmozart/path-util
A robust cross-platform utility for normalizing, comparing and modifying file paths.
MITJul 30, 2026 · metrics 2.10.0
crates.io
mcarton/rust-derivative
A set of alternative `derive` attributes for Rust
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
meilisearch/milli
Search engine library for Meilisearch ⚡️
MITJul 26, 2026 · metrics 2.10.0
Maven
torvalds/subsurface-for-dirk
Do not use - the real upstream is Subsurface-divelog/subsurface
GPL-2.0Jul 27, 2026 · metrics 2.10.0
PyPI
robertlugg/easygui
easygui for Python
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
Maven
LatencyUtils/LatencyUtils
Utilities for latency measurement and reporting
Custom licenseAug 21, 2026 · metrics 2.10.0
Packagist
gitonomy/gitlib
Library for accessing Git repositories with PHP
MITAug 13, 2026 · metrics 2.10.0
RubyGems
omniauth/omniauth-github
GitHub strategy for OmniAuth
MITJul 28, 2026 · metrics 2.10.0
npm
Netflix-Skunkworks/stethoscope-app
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
d3/d3-array
Array manipulation, ordering, searching, summarizing, etc.
ISCAug 31, 2026 · metrics 2.10.0
PyPI
databrickslabs/dbx
🧱 Databricks CLI eXtensions - aka dbx is a CLI tool for development and advanced Databricks workflows management.
Custom licenseAug 23, 2026 · metrics 2.10.0
PyPI
python-xlib/python-xlib
XLib in pure Python (Py2/Py3 compatible)
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
Packagist · npm
mokhosh/filament-kanban
Add kanban boards to your Filament pages
MITJul 22, 2026 · metrics 2.10.0
npm
eslint/doctrine
JSDoc parser
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Maven
JetBrains/java-annotations
Annotations for JVM-based languages.
Apache-2.0Jul 28, 2026 · metrics 2.10.0
—
esrlabs/git-repo
repo - The multiple repository tool (also works on MS Windows!)
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
AztecProtocol/aztec-connect
aztec connect repository
MITJul 23, 2026 · metrics 2.10.0
RubyGems
joshbuddy/jsonpath
Ruby implementation of http://goessner.net/articles/JsonPath/
MITJul 21, 2026 · metrics 2.10.0
—
rackspace/gophercloud
A Go SDK for OpenStack. IN FEATURE FREEZE. See Issue #592
Custom licenseJul 29, 2026 · metrics 2.10.0
—
ruzickap/packer-templates
Scripts and Templates used for generating Vagrant images
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
doowb/ansi-colors
Easily add ANSI colors to your text and symbols in the terminal. ansi-colors is the official ansi styling library for gulp. Used by hundreds of projects, including enquirer, vscode, codeql, azure data studio, aws-cdk, redwoodjs, leaflet, mocha, and many others.
MITAug 4, 2026 · metrics 2.10.0
RubyGems
bebanjo/delorean
DISCONTINUED - Delorean lets you travel in time with Ruby by mocking Time.now
MITJul 22, 2026 · metrics 2.10.0
—
dotnet/core-setup
Installer packages for the .NET Core runtime and libraries
No licenseAug 22, 2026 · metrics 2.10.0
npm
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
MITJul 25, 2026 · metrics 2.10.0
PyPI
python-babel/flask-babel
i18n and l10n support for Flask based on Babel and pytz
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
sindresorhus/p-cancelable
Create a promise that can be canceled
MITAug 29, 2026 · metrics 2.10.0
npm
bruce/node-temp
Temporary File, Directory, and Stream support for Node.js
MITAug 27, 2026 · metrics 2.10.0
Go
goreleaser/godownloader
[DEPRECATED] Download Go binaries as fast and easily as possible.
MITJul 27, 2026 · metrics 2.10.0
npm
devbookhq/splitter
React component for building split views like in VS Code
MITJul 24, 2026 · metrics 2.10.0
PyPI
mesosphere/marathon-lb
Marathon-lb is a service discovery & load balancing tool for DC/OS
Apache-2.0Jul 16, 2026 · metrics 2.10.0