Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,348
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Hex
balance-platform/pillar
Elixir library client for work with ClickHouse
No licenseSep 12, 2026 · metrics 2.10.0
npm
base-repos/base
Base is the foundation for creating modular, unit testable and highly pluggable, server-side node.js applications.
MITSep 15, 2026 · metrics 2.10.0
npm
browserify/stream-browserify
the stream module from node core for browsers
MITSep 15, 2026 · metrics 2.10.0
npm
dawsbot/config-chain
Handle configuration once and for all
MITOct 20, 2026 · metrics 2.10.0
PyPI
kafka-python-ng/kafka-python-ng
Fork for Python client for Apache Kafka
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
plu/simctl
Ruby interface to xcrun simctl
MITSep 11, 2026 · metrics 2.10.0
Packagist
rectorphp/type-perfect
Next level type declaration check PHPStan rules
MITOct 20, 2026 · metrics 2.10.0
npm
sindresorhus/is-plain-obj
Check if a value is a plain object
MITSep 16, 2026 · metrics 2.10.0
—
snu-ccl/FHE-MP-CNN
Implementation of deep ResNet model on CKKS scheme in Microsoft SEAL library using multiplexed parallel convolution
MITOct 25, 2026 · metrics 2.10.0
—
JuliaLang/Tokenize.jl
Tokenization for Julia source code
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
cjihrig/credit-card
Credit card validation
MITSep 13, 2026 · metrics 2.10.0
RubyGems
dylanahsmith/ar_transaction_changes
Store transaction changes for active record objects
MITSep 11, 2026 · metrics 2.10.0
PyPI
intel/torch-ccl
oneCCL Bindings for Pytorch* (deprecated)
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
PyPI
langchain-ai/langchain-experimental
⚠️ No longer maintained, see linked issue
MITSep 14, 2026 · metrics 2.10.0
npm
mljs/pca
Principal component analysis
MITSep 29, 2026 · metrics 2.10.0
Packagist
pmmp/RakLib
RakNet server implementation written in PHP
Custom licenseSep 14, 2026 · metrics 2.10.0
PyPI
python-trio/async_generator
Making it easy to write async iterators in Python 3.5
Custom licenseSep 10, 2026 · metrics 2.10.0
—
rafaqz/Interfaces.jl
Macros to define and implement interfaces, to ensure they are checked and correct.
MITSep 14, 2026 · metrics 2.10.0
PyPI
Drekin/win-unicode-console
A Python package to enable Unicode support when running Python from Windows console.
MITSep 17, 2026 · metrics 2.10.0
PyPI
JuliaML/MLDataUtils.jl
Utility package for generating, loading, splitting, and processing Machine Learning datasets
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI
ansible-collections/junipernetworks.junos
Ansible Network Collection for Juniper JunOS
GPL-3.0Oct 21, 2026 · metrics 2.10.0
—
betaveros/paradoc
GolfScript/CJam-inspired stack-based programming language that can be golfed or written literately*
MITSep 16, 2026 · metrics 2.10.0
RubyGems
busyloop/powerbar
The last progressbar-library you'll ever need
No licenseSep 11, 2026 · metrics 2.10.0
npm
epoberezkin/json-schema-traverse
Traverse JSON Schema passing each schema object to callback
MITSep 16, 2026 · metrics 2.10.0
RubyGems
fguillen/simplecov-rcov
SimpleCov formatter to generate a simple index.html Rcov style
No licenseSep 12, 2026 · metrics 2.10.0
npm
jensyt/imurmurhash-js
An incremental implementation of MurmurHash3 for JavaScript
MITSep 16, 2026 · metrics 2.10.0
npm
jshttp/compressible
Compressible Content-Type / mime checking.
MITSep 16, 2026 · metrics 2.10.0
PyPI
ronaldoussoren/macholib
macholib can be used to analyze and edit Mach-O headers, the executable format used by Mac OS X. It's typically used as a dependency analysis tool, and also to rewrite dylib references in Mach-O headers to be @executable_path relative. Though this tool targets a platform specific file format, it is pure python code that is platform and endian independent.
MITSep 10, 2026 · metrics 2.10.0
crates.io
servo/heapsize
In support of measuring heap allocations in Rust programs.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
RedKenrok/node-audiorecorder
Audio recorder for Node.js, delivers a 16-bit signed-integer linear pulse modulation WAV stream.
MITSep 16, 2026 · metrics 2.10.0