Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,440
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
MITSep 18, 2026 · metrics 2.10.0
npm
mrdoob/stats.js
JavaScript Performance Monitor
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
thoughtbot/bourbon
A Lightweight Sass Tool Set
MITAug 28, 2026 · metrics 2.10.0
npm
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
pygame/pygame
🐍🎮 pygame (the library) is a Free and Open Source python programming language library for making multimedia applications like games built on top of the excellent SDL library. C, Python, Native, OpenGL.
No licenseAug 28, 2026 · metrics 2.10.0
npm
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
MITSep 17, 2026 · metrics 2.10.0
PyPI
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
patrickmn/go-cache
An in-memory key:value store/cache (similar to Memcached) library for Go, suitable for single-machine applications.
MITAug 28, 2026 · metrics 2.10.0
Go
aws/aws-sdk-go
This SDK has reached end-of-support. The AWS SDK for Go v2 is available here: https://github.com/aws/aws-sdk-go-v2
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
kaminari/kaminari
⚡ A Scope & Engine based, clean, powerful, customizable and sophisticated paginator for Ruby webapps
MITAug 28, 2026 · metrics 2.10.0
PyPI
santinic/audiblez
Generate audiobooks from e-books
MITSep 19, 2026 · metrics 2.10.0
npm
Hopding/pdf-lib
Create and modify PDF documents in any JavaScript environment
MITSep 17, 2026 · metrics 2.10.0
npm
emilkowalski/vaul
A drawer component for React.
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
hexgrad/kokoro
https://hf.co/hexgrad/Kokoro-82M
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · Maven
DylanVann/react-native-fast-image
🚩 FastImage, performant React Native image component.
MITSep 15, 2026 · metrics 2.10.0
Go
smartystreets/goconvey
Go testing in the browser. Integrates with `go test`. Write behavioral tests in Go.
Custom licenseSep 23, 2026 · metrics 2.10.0
crates.io
paritytech/substrate
Substrate: The platform for blockchain innovators
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
XPixelGroup/BasicSR
Open Source Image and Video Restoration Toolbox for Super-resolution, Denoise, Deblurring, etc. Currently, it includes EDSR, RCAN, SRResNet, SRGAN, ESRGAN, EDVR, BasicVSR, SwinIR, ECBSR, etc. Also support StyleGAN2, DFDNet.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
traefik/yaegi
Yaegi is Another Elegant Go Interpreter
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
remix-run/history
Manage session history with JavaScript
MITSep 17, 2026 · metrics 2.10.0
PyPI
graphql-python/graphene
GraphQL framework for Python
MITAug 27, 2026 · metrics 2.10.0
PyPI
zilliztech/GPTCache
Semantic cache for LLMs. Fully integrated with LangChain and llama_index.
MITSep 17, 2026 · metrics 2.10.0
npm
soldair/node-qrcode
qr code generator
MITSep 17, 2026 · metrics 2.10.0
PyPI
MagicStack/asyncpg
A fast PostgreSQL Database Client Library for Python/asyncio.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist
php-fig/simple-cache
No repository description published.
MITAug 27, 2026 · metrics 2.10.0
Go
mitchellh/mapstructure
Go library for decoding generic map values into native Go structures and vice versa.
MITAug 28, 2026 · metrics 2.10.0
PyPI
docopt/docopt
Create *beautiful* command-line interfaces with Python
MITSep 17, 2026 · metrics 2.10.0
Go
Masterminds/squirrel
Fluent SQL generation for golang
Custom licenseOct 20, 2026 · metrics 2.10.0
—
Squirrel/Squirrel.Windows
An installation and update framework for Windows desktop apps
MITAug 28, 2026 · metrics 2.10.0
npm
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
MITSep 16, 2026 · metrics 2.10.0