Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,491
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
mailru/easyjson
Fast JSON serializer for golang.
MITAug 28, 2026 · metrics 2.10.0
Packagist
Codeception/Codeception
Full-stack testing PHP framework
MITAug 28, 2026 · metrics 2.10.0
PyPI
geopy/geopy
Geocoding library for Python.
MITAug 27, 2026 · metrics 2.10.0
PyPI
lk-geimfari/mimesis
Mimesis is a Python library for generating fake but realistic data in multiple languages and locales.
MITAug 27, 2026 · metrics 2.10.0
Packagist
yiisoft/yii
Yii PHP Framework 1.1.x
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist · npm
Studio-42/elFinder
📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist · npm
orchidsoftware/platform
Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards.
MITAug 28, 2026 · metrics 2.10.0
Go · RubyGems
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · Hex
blockscout/blockscout
Blockchain explorer for Ethereum based network and a tool for inspecting and analyzing EVM based blockchains.
Custom licenseSep 3, 2026 · metrics 2.10.0
Maven
h2database/h2database
H2 is an embeddable RDBMS written in Java.
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist
php-amqplib/php-amqplib
The most widely used PHP client for RabbitMQ
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
PyPI
fixie-ai/ultravox
A fast multimodal LLM for real-time voice
MITAug 16, 2026 · metrics 2.10.0
PyPI
JonathanSalwan/ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Custom licenseAug 12, 2026 · metrics 2.10.0
Packagist · npm
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
MITAug 28, 2026 · metrics 2.10.0
Go · npm · PyPI
kubeflow/pipelines
Machine Learning Pipelines for Kubeflow
Apache-2.0Aug 8, 2026 · metrics 2.10.0
npm
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
MITAug 27, 2026 · metrics 2.10.0
npm
ts-essentials/ts-essentials
All essential TypeScript types in one place 🤙
MITAug 12, 2026 · metrics 2.10.0
npm
taiga-family/taiga-ui
Angular components library for awesome people
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
tulios/kafkajs
A modern Apache Kafka client for node.js
MITAug 13, 2026 · metrics 2.10.0
PyPI
pika/pika
Pure Python RabbitMQ/AMQP 0-9-1 client library
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
Packagist
lazychaser/laravel-nestedset
Effective tree structures in Laravel 4-8
No licenseAug 13, 2026 · metrics 2.10.0
npm · Maven
JetBrains/ring-ui
A collection of JetBrains Web UI components
Apache-2.0Aug 2, 2026 · metrics 2.10.0
npm
jellyfin/jellyfin-web
The Free Software Media System - Official Web Client
GPL-2.0Jul 25, 2026 · metrics 2.10.0
—
yandex/odyssey
Scalable PostgreSQL connection pooler
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
tildeio/rsvp.js
A lightweight library that provides tools for organizing asynchronous code
MITAug 13, 2026 · metrics 2.10.0
PyPI
Suor/funcy
A fancy and practical functional tools
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
Packagist
danog/MadelineProto
Async PHP client API for the telegram MTProto protocol
AGPL-3.0Jul 26, 2026 · metrics 2.10.0
PyPI
piskvorky/smart_open
Utils for streaming large files (S3, HDFS, gzip, bz2...)
MITAug 4, 2026 · metrics 2.10.0
RubyGems
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
MITJul 22, 2026 · metrics 2.10.0
Packagist
zephir-lang/zephir
Zephir is a compiled high-level language aimed to ease the creation of C-extensions for PHP
MITSep 5, 2026 · metrics 2.10.0