Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
558B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven
ACINQ/eclair-mobile
An Android wallet for the Lightning Network
Apache-2.0Jul 22, 2026 · metrics 2.10.0
RubyGems
guard/rb-fsevent
FSEvents API with signals handled (without RubyCocoa)
MITJul 22, 2026 · metrics 2.10.0
crates.io
Marwes/schemafy
Crate for generating rust types from a json schema
MITAug 25, 2026 · metrics 2.10.0
crates.io
tokio-rs/valuable
No repository description published.
MITAug 3, 2026 · metrics 2.10.0
Maven
xolstice/protobuf-maven-plugin
Maven Plugin that executes the Protocol Buffers (protoc) compiler
Custom licenseJul 30, 2026 · metrics 2.10.0
NuGet
ferram4/Ferram-Aerospace-Research
Aerodynamics model for Kerbal Space Program
Custom licenseAug 1, 2026 · metrics 2.10.0
RubyGems
ConnorAtherton/rb-readline
Pure-Ruby Readline Implementation
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
Packagist · npm
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
No licenseJul 24, 2026 · metrics 2.10.0
npm
ganesshkumar/obsidian-table-editor
An Obsidian plugin to provide an editor for Markdown tables. It can open CSV data and data from Microsoft Excel, Google Sheets, Apple Numbers and LibreOffice Calc as Markdown tables from Obsidian Markdown editor.
MITAug 28, 2026 · metrics 2.10.0
npm
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
MITAug 4, 2026 · metrics 2.10.0
Maven
philburk/jsyn
Modular audio synthesizer library with unit generators in Java
Apache-2.0Jul 23, 2026 · metrics 2.10.0
npm
sindresorhus/load-json-file
Read and parse a JSON file
MITAug 4, 2026 · metrics 2.10.0
npm
szmarczak/http2-wrapper
Use HTTP/2 the same way like HTTP/1
MITAug 31, 2026 · metrics 2.10.0
PyPI
bxparks/bigquery-schema-generator
Generates the BigQuery schema from newline-delimited JSON or CSV data records.
Apache-2.0Aug 25, 2026 · metrics 2.10.0
PyPI
blue-oil/blueoil
Bring Deep Learning to small devices
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
coletdjnz/yt-dlp-youtube-oauth2
[OBSOLETE] Plugin that adds OAuth2 login support to yt-dlp's YouTube extractors
UnlicenseJul 27, 2026 · metrics 2.10.0
PyPI
rr-/screeninfo
Fetch location and size of physical screens.
Custom licenseAug 22, 2026 · metrics 2.10.0
npm · PyPI
GoogleCloudPlatform/emblem
Archived: Emblem Giving is a sample application that demonstrates a serverless architecture with continuous delivery, and trouble recovery. :diamond_shape_with_a_dot_inside:
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
blockdiag/blockdiag
No repository description published.
Apache-2.0Aug 19, 2026 · metrics 2.10.0
Go
d3fvxl/di
🛠 A full-featured dependency injection container for go programming language.
MITJul 25, 2026 · metrics 2.10.0
Packagist
konnco/filament-import
why import must use a template when you can import all files dynamically?
MITJul 25, 2026 · metrics 2.10.0
npm
karthikv/purview
A server-side component framework. What if your React components ran on the server-side?
MITAug 14, 2026 · metrics 2.10.0
Packagist
Codeception/phpunit-wrapper
PHPUnit bridge for Codeception
No licenseAug 4, 2026 · metrics 2.10.0
PyPI
exoplanet-dev/exoplanet
Fast & scalable MCMC for all your exoplanet needs!
MITSep 6, 2026 · metrics 2.10.0
npm
d3/d3-time
A calculator for humanity’s peculiar conventions of time.
ISCAug 31, 2026 · metrics 2.10.0
crates.io
llogiq/bytecount
Counting occurrences of a given byte or UTF-8 characters in a slice of memory – fast
Apache-2.0Aug 11, 2026 · metrics 2.10.0
npm
node-modules/address
Get current machine IP and MAC address.
Custom licenseAug 31, 2026 · metrics 2.10.0
PyPI
readthedocs/commonmark.py
DEPRECATED: Python CommonMark parser
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
redis-stack/redis-stack
A Redis server with additional database capabilities powered by Redis modules.
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
dektrium/yii2-rbac
[ABANDONED] Yii 2 module that helps managing your RBAC system
MITAug 2, 2026 · metrics 2.10.0