Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,670
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
mageplaza/magento-2-gdpr
Magento 2 GDPR extension helps online stores which are directly affected by GDPR, Mageplaza is about to release an extension called Mageplaza GDPR for Magento 2. This module is to supports online stores to comply those data privacy regulations.
Custom licenseOct 22, 2026 · metrics 2.10.0
crates.io
nbaksalyar/rust-streaming-http-parser
Streaming HTTP parser for Rust, based on nodejs/http-parser
MITSep 19, 2026 · metrics 2.10.0
—
nmenon/omap-u-boot-utils
U-Boot Utilities for Texas Instrument's OMAP platforms
GPL-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
pelikan-io/rustcommon
Common Rust library
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
razorpay/razorpay-cordova
Cordova wrapper around Razorpay's Android and iOS SDKs
No licenseSep 14, 2026 · metrics 2.10.0
npm
storybook-eol/storybook-ui
REPO/PACKAGE MOVED - Core Storybook UI
MITSep 20, 2026 · metrics 2.10.0
npm
vtex/test-tools
Add tests to your VTEX IO app in an instant 🚀
No licenseSep 11, 2026 · metrics 2.10.0
npm
wesleytodd/setprototypeof
Polyfill for Object.setPrototypeOf
ISCSep 16, 2026 · metrics 2.10.0
npm
wooorm/trim-lines
Remove spaces and tabs around line-breaks
MITOct 19, 2026 · metrics 2.10.0
Packagist
ConvertAPI/convertapi-library-php
A PHP library for the ConvertAPI
Custom licenseSep 19, 2026 · metrics 2.10.0
—
Esri/arcgis-runtime-toolkit-ios
Toolkit components that will simplify your iOS app development with ArcGIS Runtime
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
GodotMisogi/AeroFuse.jl
A toolbox meant for aircraft design analyses.
MITOct 23, 2026 · metrics 2.10.0
—
JuliaMath/TensorCore.jl
Lightweight package for sharing tensor-algebra definitions
MITSep 17, 2026 · metrics 2.10.0
PyPI
MichaelKim0407/flake8-use-fstring
No repository description published.
MITOct 19, 2026 · metrics 2.10.0
npm
ModuleArt/ferny
Chromium-based web browser, built on top of Electron.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
Spomky-Labs/aes-key-wrap
Pure PHP library for AES Key Wrapping (RFC3394 and RFC5649)
MITSep 18, 2026 · metrics 2.10.0
npm
TykTechnologies/api-to-mcp
Turn any API to MCP tool
MITSep 20, 2026 · metrics 2.10.0
Go
absmach/supermq
Industrial IoT Messaging and Device Management Platform
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist
baby-markt/deepl-php-lib
🧠 DeepL API Client Library supporting PHP >= 7.3
MITSep 18, 2026 · metrics 2.10.0
Hex
beam-community/ua_parser
UserAgentParser implementation for Elixir
MITOct 25, 2026 · metrics 2.10.0
—
cjheath/polyglot
Augment 'require' to load non-ruby file types
MITSep 12, 2026 · metrics 2.10.0
RubyGems
dcrec1/conventional-changelog-ruby
Ruby lib and executable to generate a conventional changelog
MITSep 12, 2026 · metrics 2.10.0
—
jenkins-x/jenkins-x-boot-config
the default GitOps source repository for booting up Jenkins X
No licenseSep 13, 2026 · metrics 2.10.0
crates.io
jethrogb/rust-cexpr
A C expression parser and evaluator
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
jkuchar/BigFileTools
Manipulate files over 2GB in PHP on all platforms with byte-precision without headache
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
jonschlinkert/repeat-string
Repeat the given string n times. Fastest implementation for repeating a string (2x faster than the native method)
MITOct 21, 2026 · metrics 2.10.0
npm
michaelleeallen/jest-junit-reporter
A JUnit test reporter for Jest.
MITOct 18, 2026 · metrics 2.10.0
PyPI
microsoft/sarif-python-om
Python classes for the SARIF object model
MITOct 21, 2026 · metrics 2.10.0
NuGet · npm
stavroskasidis/BlazorDialog
Easy dialog management for Blazor !
MITSep 14, 2026 · metrics 2.10.0
NuGet
supabase-community/gotrue-csharp
C# implementation of Supabase's GoTrue
MITSep 13, 2026 · metrics 2.10.0