Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,747
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
expo/vector-icons
No repository description published.
MITSep 8, 2026 · metrics 2.10.0
crates.io
dirs-dev/dirs-rs
moved to https://codeberg.org/dirs/dirs-rs
Apache-2.0Aug 8, 2026 · metrics 2.10.0
—
gosuri/uitable
A go library to improve readability in terminal apps using tabular data
MITAug 29, 2026 · metrics 2.10.0
Packagist
mustangostang/spyc
A simple YAML loader/dumper class for PHP
MITAug 22, 2026 · metrics 2.10.0
Go
gorilla/securecookie
Package gorilla/securecookie encodes and decodes authenticated and optionally encrypted cookie values for Go web applications.
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Go
jonboulle/clockwork
a fake clock for golang
Apache-2.0Jul 27, 2026 · metrics 2.10.0
npm
microsoft/botbuilder-js
Welcome to the Bot Framework SDK for JavaScript repository, which is the home for the libraries and packages that enable developers to build sophisticated bot applications using JavaScript.
MITAug 27, 2026 · metrics 2.10.0
Go
rivo/uniseg
Unicode Text Segmentation, Word Wrapping, and String Width Calculation in Go
MITJul 28, 2026 · metrics 2.10.0
Packagist
dflydev/dflydev-dot-access-data
Given a deep data structure representing a configuration, access configuration by dot notation.
MITAug 27, 2026 · metrics 2.10.0
npm
lisaogren/axios-cache-adapter
Caching adapter for axios. Store request results in a configurable store to prevent unneeded network requests.
MITAug 2, 2026 · metrics 2.10.0
PyPI
taskipy/taskipy
the complementary task runner for python
MITJul 30, 2026 · metrics 2.10.0
npm
mhart/aws4
Signs and prepares Node.js requests using AWS Signature Version 4
MITAug 31, 2026 · metrics 2.10.0
Hex
gen-smtp/gen_smtp
The extensible Erlang SMTP client and server library.
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
scrivo/highlight.php
A port of highlight.js by Ivan Sagalaev to PHP
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
gaogaotiantian/objprint
A library that can print Python objects in human readable format
Apache-2.0Aug 8, 2026 · metrics 2.10.0
RubyGems
nahi/httpclient
'httpclient' gives something like the functionality of libwww-perl (LWP) in Ruby.
No licenseJul 22, 2026 · metrics 2.10.0
RubyGems
resque/redis-namespace
This gem adds a Redis::Namespace class which can be used to namespace Redis keys.
MITJul 22, 2026 · metrics 2.10.0
Maven
tony-framework/TonY
TonY is a framework to natively run deep learning frameworks on Apache Hadoop.
Custom licenseSep 8, 2026 · metrics 2.10.0
—
riscv-software-src/riscv-pk
RISC-V Proxy Kernel
Custom licenseJul 25, 2026 · metrics 2.10.0
PyPI
pydanny/cached-property
A decorator for caching properties in classes.
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
roy-ht/editdistance
Fast implementation of the edit distance(Levenshtein distance)
MITAug 27, 2026 · metrics 2.10.0
RubyGems
sass/sassc-rails
Integrate SassC-Ruby with Rails!
MITJul 20, 2026 · metrics 2.10.0
PyPI
einsteinpy/einsteinpy
Repository for the EinsteinPy core package :rocket:
MITAug 23, 2026 · metrics 2.10.0
NuGet
OfficeDev/Open-Xml-PowerTools
No repository description published.
MITJul 18, 2026 · metrics 2.10.0
Go · crates.io · PyPI
doyoubi/undermoon
Mordern Redis Cluster solution for easy operation.
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Packagist
php-gettext/Gettext
PHP library to collect and manipulate gettext (.po, .mo, .php, .json, etc)
MITAug 13, 2026 · metrics 2.10.0
Hex
talentdeficit/jsx
an erlang application for consuming, producing and manipulating json. inspired by yajl
MITJul 22, 2026 · metrics 2.10.0
Maven
java-json-tools/json-patch
An RFC 6902 (JSON Patch) and reverse, plus RFC 7386 (JSON Merge Patch), implementation in Java using Jackson (2.2.x)
Custom licenseAug 21, 2026 · metrics 2.10.0
npm · NuGet
Lachee/discord-rpc-csharp
C# custom implementation for Discord Rich Presence. Not deprecated and still available!
MITAug 4, 2026 · metrics 2.10.0
Go
benbjohnson/clock
Clock is a small library for mocking time in Go.
MITAug 4, 2026 · metrics 2.10.0