Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,745
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
elastic/elastic-transport-php
No repository description published.
MITAug 8, 2026 · metrics 2.10.0
Go
go-toolsmith/astcopy
Package astcopy implements Go AST deep copy operations.
MITAug 4, 2026 · metrics 2.10.0
—
hermansimensen/bash2
Bash 2.0 that works with bhoptimer
GPL-3.0Aug 2, 2026 · metrics 2.10.0
npm
isaacs/proto-list
A list of objects bound by prototype chain
BlueOak-1.0.0Aug 29, 2026 · metrics 2.10.0
—
jow-/local-lvm-provisioner
Use local LVM for persistent storage with Kubernetes
Apache-2.0Aug 26, 2026 · metrics 2.10.0
npm
microsoft/boll
monorepo linting tool
MITAug 3, 2026 · metrics 2.10.0
npm
microsoft/vscode-docker-extensibility
Docker for Visual Studio Code: Extensibility Model
MITJul 21, 2026 · metrics 2.10.0
npm · PyPI
opnfv/samplevnf
Mirror of the OPNFV Sample Virtual Network Function Project
Custom licenseAug 5, 2026 · metrics 2.10.0
npm
request/promise-core
Core Promise support implementation for the simplified HTTP request client 'request'.
ISCAug 2, 2026 · metrics 2.10.0
RubyGems
ruby-syntax-tree/prettier_print
A drop-in replacement for the prettyprint gem with more functionality
MITJul 20, 2026 · metrics 2.10.0
NuGet
space-wizards/SpaceWizards.HttpListener
Managed, maintained, updated, and unprofessionally butchered fork of System.Net.HttpListener
MITAug 2, 2026 · metrics 2.10.0
—
tmdarwen/AudioLib
A C++ library for audio specific components.
No licenseAug 25, 2026 · metrics 2.10.0
Go
vmihailenco/tagparser
Opinionated Golang tag parser
BSD-2-ClauseJul 28, 2026 · metrics 2.10.0
—
wwwlicious/servicestack-seq-requestlogsfeature
Servicestack plugin that logs requests to seq
MPL-2.0Jul 18, 2026 · metrics 2.10.0
npm
yargs/require-main-filename
shim for require.main.filename() that works in as many environments as possible
ISCAug 29, 2026 · metrics 2.10.0
PyPI
Azure/msrestazure-for-python
The runtime library "msrestazure" for AutoRest generated Python clients.
MITJul 21, 2026 · metrics 2.10.0
—
EVerest/libslac
Simple ISO15118-3 SLAC implementation
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Packagist
Guzzle3/stream
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Stream component
No licenseJul 25, 2026 · metrics 2.10.0
PyPI
PavanTatikonda/itypes
Basic immutable container types for Python.
Custom licenseAug 8, 2026 · metrics 2.10.0
PyPI
PennyDreadfulMTG/pystache
Mustache in Python
MITAug 27, 2026 · metrics 2.10.0
Packagist
alexkart/curl-builder
Curl command generator library
MITJul 28, 2026 · metrics 2.10.0
Go
alingse/asasalint
Golang linter, lint pass any slice as any in variadic function
MITAug 4, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
No licenseSep 8, 2026 · metrics 2.10.0
—
emilopezcano/SixSigma
SixSigma R package
No licenseAug 4, 2026 · metrics 2.10.0
PyPI
executablebooks/mdformat-tables
An mdformat plugin for rendering tables
MITJul 18, 2026 · metrics 2.10.0
npm
jonschlinkert/is-extendable
Answers the question: "can this value have keys?". Returns true if a value is any of the object types: array, regexp, plain object, function or date. Useful for determining if a value is an object that can be extended.
MITAug 29, 2026 · metrics 2.10.0
Packagist
m2mtech/flysystem-stream-wrapper
A stream wrapper for Flysystem V2+
MITAug 7, 2026 · metrics 2.10.0
PyPI
sdispater/pytzdata
Official timezone database for Python.
MITAug 8, 2026 · metrics 2.10.0
NuGet · npm
serenity-is/common-features
Contains demo modules and common features shared between Serene and StartSharp
No licenseJul 25, 2026 · metrics 2.10.0
crates.io
servo/core-text-rs
DEPRECATED - Rust bindings for CoreText.
Custom licenseJul 19, 2026 · metrics 2.10.0