Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,679
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
utox39/oh-my-update
oh-my-zsh plugin/theme updater
MITJul 20, 2026 · metrics 2.10.0
Go
wailsapp/mimetype
A fast Golang library for media type and file extension detection, based on magic numbers
MITAug 22, 2026 · metrics 2.10.0
Go
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
MITJul 23, 2026 · metrics 2.10.0
npm
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
MITAug 4, 2026 · metrics 2.10.0
npm
wooorm/is-decimal
Check if a character is decimal
MITAug 4, 2026 · metrics 2.10.0
crates.io
0xMiden/p3-miden
Miden-specific Plonky3-based crates
Apache-2.0Jul 26, 2026 · metrics 2.10.0
crates.io
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
LGPL-3.0Aug 15, 2026 · metrics 2.10.0
Packagist
Art4/urllinker
🔗 UrlLinker converts any web addresses in plain text into HTML hyperlinks.
GPL-3.0Aug 14, 2026 · metrics 2.10.0
npm · NuGet
DigitalMomentum/Umbraco-Videolizer
A Datatype for pasting in Youtube / Vimeo URLs and embeding them into your site
MITSep 7, 2026 · metrics 2.10.0
PyPI
Lightning-Universe/Slack-Command-Bot-component
With this component you can create a Slack bot and enable interactivity with the Slash Commands.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
npm
MetaMask/snap-tron-wallet
Tron wallet snap
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm · crates.io
ProjectLibertyLabs/graph-sdk
SDK to interact with public and private graphs
Apache-2.0Aug 28, 2026 · metrics 2.10.0
—
RTradeLtd/testenv
🚧 configuration for spinning up Temporal test environments
No licenseAug 3, 2026 · metrics 2.10.0
—
alibaba-archive/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Apache-2.0Jul 22, 2026 · metrics 2.10.0
crates.io
astroport-fi/terra-plus
Production Quality contracts under open source licenses
AGPL-3.0Aug 11, 2026 · metrics 2.10.0
Hex
ayrat555/solana_ex
No repository description published.
MITJul 29, 2026 · metrics 2.10.0
Hex · crates.io
benodiwal/bubblegum_nifs
Elixir interface for Metaplex Bubblegum compressed NFTs on Solana. This library provides functions to create, mint, and transfer compressed NFTs using the Metaplex Bubblegum program.
MITJul 31, 2026 · metrics 2.10.0
PyPI
bretello/fancycompleter
Colorful Python tab completion - fork of https://github.com/pdbpp/fancycompleter
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
—
cwru-rcci/dug
dug is a utility similar to du that focuses on summarizing usage by group or owner
MITAug 23, 2026 · metrics 2.10.0
PyPI
cyrusbiotechnology/dj-protein
Django utilities and tools for protein storage and manipulation
MITJul 15, 2026 · metrics 2.10.0
Go
dfinity/terraform-provider-ic
A Terraform provider for provisioning Internet Computer canisters
Apache-2.0Jul 31, 2026 · metrics 2.10.0
Go
ecnepsnai/ds
A key-value store with hash indexes
MITJul 25, 2026 · metrics 2.10.0
—
evalplus/humanevalplus_release
Release repository for HumanEval+ data
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
grantila/list-open-files
lsof for Node.js
MITAug 24, 2026 · metrics 2.10.0
Go
hexops/gotextdiff
Unified text diffing in Go (copy of the internal diffing packages the officlal Go language server uses)
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
npm
hs85jeong/korean-lotto
No repository description published.
No licenseSep 5, 2026 · metrics 2.10.0
crates.io
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
jridgewell/set-array
No repository description published.
MITAug 4, 2026 · metrics 2.10.0
npm
mafintosh/mkdirp-classic
Mirror of mkdirp 0.5.2
MITAug 31, 2026 · metrics 2.10.0
—
maplibre/maplibre-native-base
MapLibre Native Base C++ Libraries
BSD-3-ClauseAug 22, 2026 · metrics 2.10.0