Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,763
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
boxcutter/ubuntu
Virtual machine templates for Ubuntu written in legacy JSON
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
invl/retry
easy to use retry decorator in python
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
aws-samples/aws-secure-environment-accelerator
ASEA developer support has ended, and the ASEA github repo will be marked Archived (read-only) by the end of 2025.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
erdewit/nest_asyncio
Patch asyncio to allow nested event loops
BSD-2-ClauseJul 21, 2026 · metrics 2.10.0
PyPI
django-ordered-model/django-ordered-model
Get your Django models in order
Custom licenseAug 8, 2026 · metrics 2.10.0
—
jplattel/obsidian-clipper
A Chrome extension that easily clips selections to Obsidian
No licenseJul 26, 2026 · metrics 2.10.0
PyPI
opentracing/opentracing-python
OpenTracing API for Python. 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163
Apache-2.0Aug 8, 2026 · metrics 2.10.0
—
RapidScada/scada
Contains Rapid SCADA sources
Apache-2.0Jul 22, 2026 · metrics 2.10.0
npm
expo/vector-icons
No repository description published.
MITSep 8, 2026 · metrics 2.10.0
crates.io
dirs-dev/dirs-rs
moved to https://codeberg.org/dirs/dirs-rs
Apache-2.0Aug 8, 2026 · metrics 2.10.0
—
gosuri/uitable
A go library to improve readability in terminal apps using tabular data
MITAug 29, 2026 · metrics 2.10.0
Packagist
mustangostang/spyc
A simple YAML loader/dumper class for PHP
MITAug 22, 2026 · metrics 2.10.0
Go
gorilla/securecookie
Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Go
jonboulle/clockwork
a fake clock for golang
Apache-2.0Jul 27, 2026 · metrics 2.10.0
npm
microsoft/botbuilder-js
Welcome to the Bot Framework SDK for JavaScript repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using JavaScript.
MITAug 27, 2026 · metrics 2.10.0
Go
rivo/uniseg
Unicode Text Segmentation, Word Wrapping, and String Width Calculation in Go
MITJul 28, 2026 · metrics 2.10.0
Packagist
dflydev/dflydev-dot-access-data
Given a deep data structure representing a configuration, access configuration by dot notation.
MITAug 27, 2026 · metrics 2.10.0
npm
lisaogren/axios-cache-adapter
Caching adapter for axios. Store request results in a configurable store to prevent unneeded network requests.
MITAug 2, 2026 · metrics 2.10.0
RubyGems
peterc/whatlanguage
Pure Ruby natural language detection library for 160+ languages.
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
taskipy/taskipy
the complementary task runner for python
MITJul 30, 2026 · metrics 2.10.0
npm
mhart/aws4
Signs and prepares Node.js requests using AWS Signature Version 4
MITAug 31, 2026 · metrics 2.10.0
Hex
gen-smtp/gen_smtp
The extensible Erlang SMTP client and server library.
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
scrivo/highlight.php
A port of highlight.js by Ivan Sagalaev to PHP
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
gaogaotiantian/objprint
A library that can print Python objects in human readable format
Apache-2.0Aug 8, 2026 · metrics 2.10.0
RubyGems
nahi/httpclient
'httpclient' gives something like the functionality of libwww-perl (LWP) in Ruby.
No licenseJul 22, 2026 · metrics 2.10.0
RubyGems
resque/redis-namespace
This gem adds a Redis::Namespace class which can be used to namespace Redis keys.
MITJul 22, 2026 · metrics 2.10.0
Maven
tony-framework/TonY
TonY is a framework to natively run deep learning frameworks on Apache Hadoop.
Custom licenseSep 8, 2026 · metrics 2.10.0
—
riscv-software-src/riscv-pk
RISC-V Proxy Kernel
Custom licenseJul 25, 2026 · metrics 2.10.0
PyPI
pydanny/cached-property
A decorator for caching properties in classes.
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
roy-ht/editdistance
Fast implementation of the edit distance(Levenshtein distance)
MITAug 27, 2026 · metrics 2.10.0