Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,778
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
norksec/torcrack
A simple Tor enabled, multi-process SSH dictionary attack in Python3.
No licenseAug 2, 2026 · metrics 2.10.0
Go
shayan-shojaei/radar
An interactive terminal API explorer for OpenAPI / Swagger specifications.
MITJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/request-body-parser
Middleware for parsing various data formats
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
4limirzaei/iran-bank-detector
Find Iranian bank information based on IBan and Card Number
No licenseJul 15, 2026 · metrics 2.10.0
Packagist
TheDragonCode/pretty-array
Simple conversion of an array to a pretty view
MITJul 20, 2026 · metrics 2.10.0
npm
streamr-dev/network-contracts
Smart contracts and subgraphs used by the Streamr Network
No licenseAug 26, 2026 · metrics 2.10.0
Go
tsung-sc/Tsung-Go-shopping-project
GO语言开发的一个WEB商城项目，采用的框架为BEEGO
MITAug 2, 2026 · metrics 2.10.0
Packagist
yiisoft/form-model
Provides a base for form models and helps to fill, validate and display them.
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/middleware-dispatcher
PSR-15 middleware dispatcher
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/yii-event
Events for Yii applications
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/yii-runner
Yii application runner
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/yii-view-renderer
PSR-7 compatible view renderer
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
Codeception/base
Base Codeception distribution with minimal set of dependencies (excluding WebDriver and Guzzle)
MITAug 10, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/json-fallback
Adds support for fallback JSON string translation
MITJul 20, 2026 · metrics 2.10.0
NuGet
StockSharp/Ecng
System framework with utility projects. Used by StockSharp platform
Custom licenseAug 22, 2026 · metrics 2.10.0
NuGet
JeremyVm/QuestPDF.HTML
HTMLToQPDF is an extension for QuestPDF that allows to generate PDF from HTML
MITAug 31, 2026 · metrics 2.10.0
Go
quasilyte/regex
Regular expression libraries for Go
MITAug 29, 2026 · metrics 2.10.0
Go
txix-open/etp
Event transport protocol - alternative to socket.io
MITJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/definitions
The package provides definition syntax. Definition is describing a way to create and configure a service or an object.
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/test-support
No repository description published.
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
avto-dev/bank-card-vue-component
Vue.js component with bank card
MITJul 20, 2026 · metrics 2.10.0
npm
diplodoc-platform/components
No repository description published.
MITJul 22, 2026 · metrics 2.10.0
Go
green-api/whatsapp-api-client-golang
Create a golang application with WhatsApp API
Custom licenseJul 20, 2026 · metrics 2.10.0
Hex
kortirso/chess
Elixir package for playing chess
No licenseAug 3, 2026 · metrics 2.10.0
Packagist
oroinc/customer-portal
OroCommerce package with customer portal and non authenticated visitor website base features.
Custom licenseSep 2, 2026 · metrics 2.10.0
Packagist
roadrunner-php/centrifugo
🔌 RoadRunner Centrifugo Bridge
MITJul 28, 2026 · metrics 2.10.0
Packagist
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
MITAug 22, 2026 · metrics 2.10.0
Go
txix-open/isp-kit
No repository description published.
MITAug 29, 2026 · metrics 2.10.0
Packagist
yiisoft/data-db
Database adapter for data interfaces
BSD-3-ClauseJul 31, 2026 · metrics 2.10.0
Packagist
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0