Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,768
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
niklasfasching/go-org
Org mode parser with html & pretty printed org rendering. also shitty static site generator.
MITJul 28, 2026 · metrics 2.10.0
npm
yargs/cliui
easily create complex multi-column command-line-interfaces.
ISCAug 4, 2026 · metrics 2.10.0
crates.io
Michael-F-Bryan/include_dir
The logical evolution of the include_str macro for embedding a directory tree into your binary.
MITAug 13, 2026 · metrics 2.10.0
npm
evanderkoogh/otel-cf-workers
An OpenTelemetry compatible library for instrumenting and exporting traces for Cloudflare Workers
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
—
microsoft/RTVS
R Tools for Visual Studio.
MITJul 20, 2026 · metrics 2.10.0
npm
microsoft/setup-msbuild
A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications.
MITAug 1, 2026 · metrics 2.10.0
Packagist
php-fig/http-message-util
No repository description published.
MITAug 27, 2026 · metrics 2.10.0
Go
HumanSecurity/marshmallow
Marshmallow provides a flexible and performant JSON unmarshalling in Go. It specializes in dealing with unstructured struct - when some fields are known and some aren't, with zero performance overhead nor extra coding needed.
MITAug 29, 2026 · metrics 2.10.0
PyPI
Lightning-Universe/stable-diffusion-deploy
Learn to serve Stable Diffusion models on cloud infrastructure at scale. This Lightning App shows load-balancing, orchestrating, pre-provisioning, dynamic batching, GPU-inference, micro-services working together via the Lightning Apps framework.
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
hMatoba/Piexif
Exif manipulation with pure python script.
MITAug 27, 2026 · metrics 2.10.0
PyPI
kyamagu/faiss-wheels
Community-maintained faiss wheel builder
MITJul 18, 2026 · metrics 2.10.0
—
JuliaGPU/CUDAnative.jl
Julia support for native CUDA programming
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
walling/unorm
JavaScript Unicode 8.0 Normalization - NFC, NFD, NFKC, NFKD.
Custom licenseAug 27, 2026 · metrics 2.10.0
crates.io
bonsairobo/building-blocks
A voxel library for real-time applications.
MITJul 26, 2026 · metrics 2.10.0
crates.io
jorgecarleitao/parquet2
Fastest and safest Rust implementation of parquet. `unsafe` free. Integration-tested against pyarrow
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
jshttp/negotiator
An HTTP content negotiator for Node.js
MITAug 4, 2026 · metrics 2.10.0
NuGet
Azure/azure-libraries-for-net
Azure libraries for .Net
MITJul 18, 2026 · metrics 2.10.0
RubyGems
ipaddress-gem/ipaddress
A library to handle IPv4 and IPv6 addresses in a modern and productive way.
MITJul 22, 2026 · metrics 2.10.0
PyPI
neithere/argh
An argparse wrapper that doesn't make you say "argh" each time you deal with it.
LGPL-3.0Aug 19, 2026 · metrics 2.10.0
Packagist
symplify/coding-standard
[Deprecated] Use ECS that includes this set with more new rules
MITAug 4, 2026 · metrics 2.10.0
crates.io
ClueLang/Clue
C/Rust like programming language that compiles into Lua code
MITAug 14, 2026 · metrics 2.10.0
npm
mathiasbynens/regenerate
Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.
MITAug 4, 2026 · metrics 2.10.0
npm
bytedance/syllepsis
Syllepsis is an out-of-the-box rich text editor.
Custom licenseAug 3, 2026 · metrics 2.10.0
RubyGems
chef-boneyard/chef-dk
DEPRECATED: A streamlined development and deployment workflow for Chef Infra platform.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
—
rabbitmq/rabbitmq-management
RabbitMQ Management UI and HTTP API
Custom licenseJul 26, 2026 · metrics 2.10.0
RubyGems
threedaymonk/htmlbeautifier
A normaliser/beautifier for HTML that also understands embedded Ruby. Ideal for tidying up Rails templates.
MITJul 22, 2026 · metrics 2.10.0
RubyGems
breamware/sidekiq-batch
Sidekiq Batch Jobs Implementation
MITJul 27, 2026 · metrics 2.10.0
npm
creationix/jsonparse
A streaming JSON parser written in pure JavaScript for node.js
MITAug 4, 2026 · metrics 2.10.0
NuGet
DarkWanderer/ClickHouse.Client
Unofficial .NET client for ClickHouse database
MITAug 4, 2026 · metrics 2.10.0
npm
Shopify/polaris-viz
A collection of React and React native components that compose Shopify's data visualization system
Custom licenseAug 13, 2026 · metrics 2.10.0