Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,067
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
hs85jeong/korean-lotto
No repository description published.
No licenseOct 21, 2026 · metrics 2.10.0
crates.io
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
jcmturner/goidentity
No repository description published.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
jelmer/debversion-rs
Rust parser/validator for Debian version strings
No licenseOct 18, 2026 · metrics 2.10.0
npm
jhamlet/proteus
A declarative way of creating objects and classes in JavaScript
Custom licenseOct 8, 2026 · metrics 2.10.0
npm
jridgewell/set-array
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
npm
justinmc/tiny-molecule
A small, developer-friendly 3D molecule viewer for the modern web
MITOct 22, 2026 · metrics 2.10.0
npm
kwsites/file-exists
Synchronous file / folder existence check
MITSep 23, 2026 · metrics 2.10.0
npm
mafintosh/mkdirp-classic
Mirror of mkdirp 0.5.2
MITOct 21, 2026 · metrics 2.10.0
—
mailhog/data
MailHog data library
MITOct 18, 2026 · metrics 2.10.0
Go
manuwarfare/abbtr
abbtr is a cli app (alternative to alias function) to abbreviate long commands in the terminal
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
—
maplibre/maplibre-native-base
MapLibre Native Base C++ Libraries
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Packagist
matheusab-soft/rector-html-output-formatter
OutputFormatter that exports an HTML file containing summary and diffs from Rector's process command.
MITSep 10, 2026 · metrics 2.10.0
Go
melihbirim/sieswi
Ultra-fast SQL-on-CSV engine in Go. Streams results instantly, auto-parallelizes big files, no database required.
MITSep 20, 2026 · metrics 2.10.0
Go
michaelrampl/commity
Make writing commit messages fun again.
No licenseOct 20, 2026 · metrics 2.10.0
RubyGems
microsoft/kiota-serialization-json-ruby
Kiota serialization provider implementation for Ruby and JSON
MITOct 19, 2026 · metrics 2.10.0
RubyGems
mikedll/cknife
Ruby Gem with misc. command line utilities.
MITOct 20, 2026 · metrics 2.10.0
Hex
nervescloud/whenwhere
A small library for Nerves devices to check in with a Nerves project endpoint and get info
Apache-2.0Sep 9, 2026 · metrics 2.10.0
—
newrelic/nuget-azure-cloud-services
The nuget package for x64 apps (VMs or Cloud Services - Web Roles | Worker Roles) running on Windows Azure
MITSep 14, 2026 · metrics 2.10.0
—
nitrictech/contracts
Contracts for the Nitric APIs, served by Nitric Membrane and consumed by various language SDKs
No licenseSep 20, 2026 · metrics 2.10.0
Go
octasoft-ltd/gmail-exporter
A Go CLI tool for exporting and importing Gmail between accounts using OAuth
No licenseSep 19, 2026 · metrics 2.10.0
crates.io
octopus-network/substrate
Substrate: The platform for blockchain innovators
Apache-2.0Sep 25, 2026 · metrics 2.10.0
Packagist
onfleet/discontinued-php-onfleet
Onfleet API wrapper in PHP
MITSep 18, 2026 · metrics 2.10.0
—
open5gs/prometheus-client-c
A Prometheus Client in C
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io
openebs-archive/mayastor-api
No repository description published.
Apache-2.0Oct 15, 2026 · metrics 2.10.0
Go
openshift/ceph-csi
CSI driver for ceph
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
platform-mesh/platform-mesh-operator
No repository description published.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go
pulumiverse/pulumi-time
Pulumi Time provider used to interact with time-based resources.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go · RubyGems
puppetlabs/puppet-data-service
Puppet Data Service - SolArch implementation of the PDS
No licenseSep 10, 2026 · metrics 2.10.0
PyPI
qBraid/qBraid-Lab
Web-based JupyterLab deployment providing curated software tools for for researchers and developers in quantum computing.
Apache-2.0Oct 11, 2026 · metrics 2.10.0