Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,316
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
tmdarwen/AudioLib
A C++ library for audio specific components.
No licenseOct 23, 2026 · metrics 2.10.0
Maven
valtimo-platform/valtimo-backend-libraries
Welcome at the Valtimo repository. Valtimo is the less-code platform for Business Process Automation. Built on top of business process orchestrator Camunda. Valtimo's goal is to make implementing business process automation and case management easy. Valtimo is the server side component for business process automation.
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
vmihailenco/tagparser
Opinionated Golang tag parser
BSD-2-ClauseSep 14, 2026 · metrics 2.10.0
NuGet
wwwlicious/servicestack-seq-requestlogsfeature
Servicestack plugin that logs requests to seq
MPL-2.0Sep 11, 2026 · metrics 2.10.0
npm
yargs/require-main-filename
shim for require.main.filename() that works in as many environments as possible
ISCOct 20, 2026 · metrics 2.10.0
PyPI
Azure/msrestazure-for-python
The runtime library "msrestazure" for AutoRest generated Python clients.
MITSep 12, 2026 · metrics 2.10.0
Go
DE-labtory/bifrost
P2P network library suppoting it-chain 📨
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
EVerest/libslac
Simple ISO15118-3 SLAC implementation
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
Finschia/iavl
Merkleized IAVL+ Tree implementation in Go forked from cosmos/iavl(https://github.com/cosmos/iavl)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · npm
GrinZero/dpdm-fast
Detect circular dependencies in your TypeScript projects with `Rust`.
MITOct 20, 2026 · metrics 2.10.0
Packagist
Guzzle3/stream
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Stream component
No licenseSep 13, 2026 · metrics 2.10.0
Go
NubeDev/bacnet
No repository description published.
GPL-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
PavanTatikonda/itypes
Basic immutable container types for Python.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
SurveyMonkey/graphql-ergonomock
Automatic mocking of GraphQL queries
MITSep 27, 2026 · metrics 2.10.0
Go
Zondax/ledger-go
Go package to connect to Ledger devices
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Packagist
alexkart/curl-builder
Curl command generator library
MITSep 14, 2026 · metrics 2.10.0
Go
alingse/asasalint
Golang linter, lint pass any slice as any in variadic function
MITSep 16, 2026 · metrics 2.10.0
npm
aurelia/pal
Aurelia's Platform Abstraction Layer
MITOct 19, 2026 · metrics 2.10.0
npm
bendrucker/builtin-status-codes
The map of HTTP status codes from the builtin http module
MITSep 15, 2026 · metrics 2.10.0
Go
binbandit/sage
Burning away Git complexity
MITOct 19, 2026 · metrics 2.10.0
PyPI
brettcannon/modutil
A library for working with Python modules
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
No licenseOct 22, 2026 · metrics 2.10.0
crates.io
datafuse-extras/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
datawire/teleproxy
No repository description published.
No licenseSep 19, 2026 · metrics 2.10.0
npm
ealush/flairup
🎩 CSS-In-JS Library for package authors
MITOct 16, 2026 · metrics 2.10.0
—
emilopezcano/SixSigma
SixSigma R package
No licenseSep 16, 2026 · metrics 2.10.0
RubyGems
etscrivner/rbsecp256k1
Compiled Ruby wrapper around libsecp256k1 for secp256k1 ECDSA.
UnlicenseSep 11, 2026 · metrics 2.10.0
RubyGems
hardpixel/unaccent
Replace a string's accent characters with unaccented characters.
MITSep 11, 2026 · metrics 2.10.0
PyPI
hukkin/mdformat-tables
An mdformat plugin for rendering tables
MITSep 10, 2026 · metrics 2.10.0
npm
jonschlinkert/class-utils
Utils for working with JavaScript classes and prototype methods.
MITSep 15, 2026 · metrics 2.10.0