Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,754
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · PyPI
paulfitz/daff
align and compare tables
MITSep 12, 2026 · metrics 2.10.0
RubyGems
lian/bitcoin-ruby
bitcoin utils and protocol in ruby.
Custom licenseSep 11, 2026 · metrics 2.10.0
RubyGems
matthewrudy/memoist
ActiveSupport::Memoizable with a few enhancements
MITSep 11, 2026 · metrics 2.10.0
—
derric/cleanthesis
Clean Thesis is a clean, simple, and elegant LaTeX style (or template) for thesis documents.
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
replicate/replicate-python
Python client for Replicate
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
oppiliappan/eva
a calculator REPL, similar to bc(1)
MITSep 13, 2026 · metrics 2.10.0
npm
sindresorhus/object-assign
ES2015 Object.assign() ponyfill
MITSep 16, 2026 · metrics 2.10.0
npm
eslint/typescript-eslint-parser
An ESLint custom parser which leverages TypeScript ESTree to allow for ESLint to lint TypeScript source code.
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
pvorb/node-md5
a JavaScript function for hashing messages with MD5
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
Go
valyala/fasttemplate
Simple and fast template engine for Go
MITSep 12, 2026 · metrics 2.10.0
PyPI
reingart/pyfpdf
Simple PDF generation for Python (FPDF PHP port)
LGPL-3.0Oct 21, 2026 · metrics 2.10.0
RubyGems
collectiveidea/json_spec
Easily handle JSON in RSpec and Cucumber
MITSep 11, 2026 · metrics 2.10.0
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITSep 16, 2026 · metrics 2.10.0
Go
grandcat/zeroconf
mDNS / DNS-SD Service Discovery in pure Go (also known as Bonjour)
Custom licenseSep 23, 2026 · metrics 2.10.0
crates.io
facebook/winterfell
A STARK prover and verifier for arbitrary computations
MITSep 14, 2026 · metrics 2.10.0
Packagist
ramsey/uuid-doctrine
❄️ 🗄️ Allow the use of a ramsey/uuid UUID as Doctrine field type.
MITSep 18, 2026 · metrics 2.10.0
RubyGems
arches/table_print
The best data slicer! Watch a 3 minute screencast at http://tableprintgem.com
MITSep 11, 2026 · metrics 2.10.0
NuGet · npm
microsoft/botbuilder-dotnet
Welcome to the Bot Framework SDK for .NET repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using .NET.
MITSep 14, 2026 · metrics 2.10.0
Packagist
paragonie/constant_time_encoding
Constant-Time Character Encoding in PHP Projects
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
logpai/Drain3
A robust streaming log template miner based on the Drain algorithm
Custom licenseOct 13, 2026 · metrics 2.10.0
Hex
pragdave/earmark
Markdown parser for Elixir
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
nytimes/gziphandler
Go middleware to gzip HTTP responses
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
UniSecurityGuard/UniSecurityGuard
本科华五，曾赴美qs50读博，某兄弟院校副教授，校园门卫亭女性主理人，为防止炸号的备份平台，是本人。
No licenseSep 12, 2026 · metrics 2.10.0
npm
estools/esquery
ECMAScript AST query library.
Custom licenseSep 16, 2026 · metrics 2.10.0
Packagist
talyssonoc/react-laravel
Package for using ReactJS with Laravel
No licenseSep 11, 2026 · metrics 2.10.0
NuGet
NModbus4/NModbus4
NModbus4 is a C# implementation of the Modbus protocol. This project is archived in favor of https://github.com/NModbus/NModbus
MITSep 11, 2026 · metrics 2.10.0
npm
no-context/moo
Optimised tokenizer/lexer generator! 🐄 Uses /y for performance. Moo.
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
deathau/sliding-panes-obsidian
Andy Matuschak Mode as a plugin
No licenseSep 13, 2026 · metrics 2.10.0
npm
steipete/macos-automator-mcp
An MCP server to run AppleScript and JXA (JavaScript for Automation) to macOS.
MITOct 7, 2026 · metrics 2.10.0
PyPI
jazzband/django-nose
Django test runner using nose
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0