Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,529
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
581B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
s3gw-tech/s3gw
Container able to run on a Kubernetes cluster, providing S3-compatible endpoints to applications.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
crates.io
tailcallhq/gh-workflow
Write your github workflows in rust
Apache-2.0Jul 22, 2026 · metrics 2.10.0
npm
trentm/node-dashdash
A light, featureful and explicit option parsing library for node.js.
Custom licenseAug 31, 2026 · metrics 2.10.0
RubyGems
dkubb/yardstick
A tool for verifying YARD documentation coverage
MITJul 22, 2026 · metrics 2.10.0
PyPI
gweis/isodate
ISO 8601 date/time parser
BSD-3-ClauseSep 9, 2026 · metrics 2.10.0
npm
unshiftio/querystringify
Querystringify - Small, simple but powerful query string parser.
MITAug 31, 2026 · metrics 2.10.0
PyPI
chtd/psycopg2cffi
Port to cffi with some speed improvements
Custom licenseAug 8, 2026 · metrics 2.10.0
Packagist
ctidigital/magento2-configurator
Magento 2 Configurator
MITAug 20, 2026 · metrics 2.10.0
Packagist
jawira/case-converter
Convert strings between 13 naming conventions: Snake case, Camel case, Kebab case, Pascal case, Ada case, Train case, Cobol case, Macro case, Upper case, Lower case, Title case, Sentence case and Dot notation.
MITAug 13, 2026 · metrics 2.10.0
—
tracebox/tracebox
Tracebox, a middlebox detection tool
GPL-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
google/python-subprocess32
A backport of the Python 3 subprocess module for use on Python 2.
Custom licenseAug 19, 2026 · metrics 2.10.0
Packagist
laminas/laminas-mvc
Laminas's event-driven MVC layer, including MVC Applications, Controllers, and Plugins
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
micromatch/to-regex-range
Pass two numbers, get a regex-compatible source string for matching ranges. Fast compiler, optimized regex, and validated against more than 2.78 million test assertions. Useful for creating regular expressions to validate numbers, ranges, years, etc.
MITAug 4, 2026 · metrics 2.10.0
PyPI
your-tools/tbump
Bump software releases
BSD-3-ClauseJul 21, 2026 · metrics 2.10.0
Go
zhaoyunxing92/dingtalk
go版本的钉钉开发api
Apache-2.0Sep 7, 2026 · metrics 2.10.0
Go
Antonboom/testifylint
The Golang linter that checks usage of github.com/stretchr/testify.
MITAug 4, 2026 · metrics 2.10.0
npm · crates.io
FuelLabs/fuel-bridge
The canonical Fuel bridge mono repo.
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
ProtonMail/proton-calendar
Proton Calendar built with React.
No licenseJul 25, 2026 · metrics 2.10.0
PyPI
beta-team/beta-recsys
Beta-RecSys: Build, Evaluate and Tune Automated Recommender Systems
MITJul 25, 2026 · metrics 2.10.0
RubyGems
prawnpdf/pdf-inspector
A collection of PDF::Reader based analysis classes for inspecting PDF output. Mainly used for testing Prawn, but will work with any PDF.
Custom licenseJul 28, 2026 · metrics 2.10.0
RubyGems
berkmancenter/namae
Namae (名前) parses personal names and splits them into their component parts.
No licenseAug 21, 2026 · metrics 2.10.0
npm
browserify/browser-pack
pack node-style source files from a json stream into a browser bundle
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
teambition/merge2
Merge multiple streams into one stream in sequence or parallel (~119M/month downloads).
MITAug 4, 2026 · metrics 2.10.0
—
tonyhffong/Lint.jl
A lint tool for Julia code
Custom licenseJul 24, 2026 · metrics 2.10.0
crates.io
trifectatechfoundation/bzip2-rs
libbz2 (bzip2 compression) bindings for Rust
Apache-2.0Aug 11, 2026 · metrics 2.10.0
npm
wilzbach/msa
Modular BioJS compoment for a multiple sequence alignment
BSL-1.0Sep 9, 2026 · metrics 2.10.0
crates.io
Michael-F-Bryan/mdbook-linkcheck
A backend for `mdbook` which will check your links for you.
MITJul 26, 2026 · metrics 2.10.0
RubyGems
danielsdeleo/deep_merge
Recursive Merging for Ruby Hashes
MITJul 22, 2026 · metrics 2.10.0
PyPI
nirum/tableprint
Pretty console printing :clipboard: of tabular data in python :snake:
MITAug 25, 2026 · metrics 2.10.0
npm
thlorenz/convert-source-map
Converts a source-map from/to different formats.
MITAug 4, 2026 · metrics 2.10.0