Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,735
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI · crates.io · npm +1
tree-sitter/tree-sitter-java
Java grammar for tree-sitter
MITAug 27, 2026 · metrics 2.10.0
RubyGems
defunkt/colored
Colors in your terminal. Unmaintained.
MITJul 22, 2026 · metrics 2.10.0
Go
cpuguy83/go-md2man
No repository description published.
MITJul 28, 2026 · metrics 2.10.0
Packagist · npm
dmitrybubyakin/nova-medialibrary-field
Laravel Nova field for managing the Spatie media library
MITJul 29, 2026 · metrics 2.10.0
—
lancaster-university/microbit-dal
No repository description published.
Custom licenseJul 26, 2026 · metrics 2.10.0
—
mwitkow/go-conntrack
Go middleware for net.Conn tracking (Prometheus/trace)
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
wowserhq/wowser
World of Warcraft in the browser using JavaScript and WebGL
MITJul 31, 2026 · metrics 2.10.0
Go
spf13/jwalterweatherman
So you always leave a note
MITJul 30, 2026 · metrics 2.10.0
crates.io
input-output-hk/rust-cardano
rust client libraries to deal with the current cardano mainnet (byron / cardano-sl)
MITJul 18, 2026 · metrics 2.10.0
npm
jshttp/etag
Create simple HTTP ETags
MITAug 4, 2026 · metrics 2.10.0
PyPI
matrix-org/matrix-python-sdk
Matrix Client-Server SDK for Python 2 and 3
Apache-2.0Jul 31, 2026 · metrics 2.10.0
PyPI
ARM-software/SCP-firmware
This System Control Processor (SCP) firmware repository is no longer used and has been set to Read-only for archiving purposes. Please refer to the following active repository.
Custom licenseJul 22, 2026 · metrics 2.10.0
crates.io
KokaKiwi/rust-hex
A basic crate to encode values to hexadecimal representation. Originally extracted from rustc-serialize.
Apache-2.0Aug 3, 2026 · metrics 2.10.0
PyPI
emmetio/sublime-text-plugin
The essential toolkit for web-developers
MITAug 1, 2026 · metrics 2.10.0
PyPI
machow/quartodoc
Generate API documentation with quarto
MITJul 30, 2026 · metrics 2.10.0
crates.io
nox/serde_urlencoded
x-www-form-urlencoded meets Serde
Apache-2.0Aug 3, 2026 · metrics 2.10.0
PyPI
bigdata-ustc/EduKTM
The Model Zoo of Knowledge Tracing Models
Apache-2.0Aug 15, 2026 · metrics 2.10.0
—
timescale/helm-charts
Configuration and Documentation to run TimescaleDB in your Kubernetes cluster
Apache-2.0Jul 22, 2026 · metrics 2.10.0
—
timescale/timescaledb-kubernetes
Configuration and Documentation to run TimescaleDB in your Kubernetes cluster
Apache-2.0Jul 18, 2026 · metrics 2.10.0
—
aymerick/douceur
A simple CSS parser and inliner in Go
MITJul 30, 2026 · metrics 2.10.0
Maven
os72/protoc-jar-maven-plugin
Protocol Buffers protobuf maven plugin - based on protoc-jar multi-platform executable protoc JAR
Apache-2.0Aug 21, 2026 · metrics 2.10.0
crates.io
tokio-rs/tls
A collection of Tokio based TLS libraries.
MITAug 11, 2026 · metrics 2.10.0
PyPI
AzureAD/azure-activedirectory-library-for-python
ADAL for Python
Custom licenseJul 21, 2026 · metrics 2.10.0
npm
kornelski/http-cache-semantics
RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
Maven
javaee/servlet-spec
The API and Issue Tracker for the JCP Standard Java Servlet Specification
Custom licenseJul 28, 2026 · metrics 2.10.0
RubyGems
railsware/rack_session_access
Rack middleware that provides access to rack.session environment
MITAug 21, 2026 · metrics 2.10.0
npm
ajv-validator/ajv-keywords
Additional JSON-Schema keywords for Ajv JSON validator
MITJul 22, 2026 · metrics 2.10.0
PyPI
matthewgilbert/pdblp
pandas wrapper for Bloomberg Open API
MITSep 8, 2026 · metrics 2.10.0
PyPI
schodet/nxt-python
NXT-Python is a python driver/interface for the Lego Mindstorms NXT robot based on NXT_python.
GPL-3.0Aug 16, 2026 · metrics 2.10.0
Packagist
webmozarts/glob
A PHP implementation of Ant's glob.
MITJul 22, 2026 · metrics 2.10.0