Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,067
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
MITSep 13, 2026 · metrics 2.10.0
RubyGems
ruby/readline
Readline Loader
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
ruiii/plugin-Hairstrength
senka-calc for poi
MITSep 18, 2026 · metrics 2.10.0
Go · npm
rustyguts/alcoves
Simple self-hosted media management application
No licenseSep 11, 2026 · metrics 2.10.0
Go
sacloud/api-client-go
さくらのクラウド向けAPI/HTTPクライアントライブラリ
Apache-2.0Oct 4, 2026 · metrics 2.10.0
PyPI
scieloorg/ioisis
I/O for ISIS files in Python
BSD-2-ClauseOct 23, 2026 · metrics 2.10.0
npm · Go · PyPI
sendify-project/sendify
A chat service with basic messaging features.
No licenseSep 10, 2026 · metrics 2.10.0
PyPI
seperman/orderly-set
Orderly Set previously known as Ordered Set
MITSep 10, 2026 · metrics 2.10.0
—
sigp/unsafe-eth2-deposit-contract
An UNSAFE deposit contract for testing Lighthouse. DO NOT USE.
No licenseSep 11, 2026 · metrics 2.10.0
npm
sinonjs/commons
Simple functions shared among the sinon end user libraries
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
sphinx-doc/sphinxcontrib-devhelp
No repository description published.
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
sphinx-doc/sphinxcontrib-serializinghtml
No repository description published.
Custom licenseOct 23, 2026 · metrics 2.10.0
NuGet
thygrrr/fennecs-fork
... the tiny, tiny, high-energy Entity Component System!
MITSep 25, 2026 · metrics 2.10.0
PyPI
tjdwls101010/IBD-RS-Rating
No repository description published.
MITOct 22, 2026 · metrics 2.10.0
PyPI
tsutsu3/uc.micro-py
Micro subset of unicode data files for linkify-it-py projects.
Custom licenseOct 23, 2026 · metrics 2.10.0
RubyGems
unleashy/koota
Koota generates words given a pattern.
MITSep 19, 2026 · metrics 2.10.0
npm
wooorm/character-entities-html4
Map of named character references from HTML 4
MITSep 16, 2026 · metrics 2.10.0
npm
wooorm/is-alphabetical
Check if a character is alphabetical
MITSep 16, 2026 · metrics 2.10.0
RubyGems
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
MITOct 20, 2026 · metrics 2.10.0
NuGet
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
zopefoundation/zope.deprecation
No repository description published.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
23jdd/SamKv
一个面向日志场景的单机 LSM-Tree KV 存储引擎,提供 webui操作界面
MITOct 4, 2026 · metrics 2.10.0
—
4paradigm/hybridsql-asserts
HybridSQL third-party libraries
Apache-2.0Sep 11, 2026 · metrics 2.10.0
crates.io
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
MITOct 23, 2026 · metrics 2.10.0
Go
AgustinBanchio/go-limit
No repository description published.
MITSep 19, 2026 · metrics 2.10.0
crates.io
AlexanderSchuetz97/xz4rust
Memory Safe pure Rust no-std & no alloc XZ decoder
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
Automattic/sqlite-database-integration
A fork of https://github.com/WordPress/sqlite-database-integration/.
GPL-2.0Sep 13, 2026 · metrics 2.10.0
Go
AzureAD/microsoft-authentication-extensions-for-go
Secure cross-platform token cache for MSAL public client apps
MITSep 14, 2026 · metrics 2.10.0
Go
Bedrock-OSS/go-burrito
No repository description published.
MITSep 15, 2026 · metrics 2.10.0
—
Consensys-Incorporated/go-ethereum
Official golang implementation of the Ethereum protocol
LGPL-3.0Sep 16, 2026 · metrics 2.10.0