Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,284
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Packagist
SimpleBus/message-bus
[READ ONLY] Generic classes and interfaces for messages and message buses. Full documentation can be found here:
MITSep 13, 2026 · metrics 2.10.0
Go
terra-farm/terraform-provider-virtualbox
VirtualBox provider for Terraform
MITOct 18, 2026 · metrics 2.10.0
Maven
duolingo/rtl-viewpager
ViewPager with RTL support :arrows_counterclockwise:
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
feross/safe-buffer
Safer Node.js Buffer API
MITSep 16, 2026 · metrics 2.10.0
PyPI
requests/requests-ntlm
NTLM authentication support for Requests.
Custom licenseSep 14, 2026 · metrics 2.10.0
PyPI
salaniz/pycocoevalcap
Python 3 support for the MS COCO caption evaluation tools
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
workhorsy/py-cpuinfo
A module for getting CPU info with pure Python
MITOct 23, 2026 · metrics 2.10.0
npm
Obsidian-TTRPG-Community/dice-roller
Inline dice rolling for Obsidian.md
No licenseOct 20, 2026 · metrics 2.10.0
npm
dominictarr/split
No repository description published.
MITSep 15, 2026 · metrics 2.10.0
npm
d3/d3-drag
Drag and drop SVG, HTML or Canvas using mouse or touch input.
ISCSep 16, 2026 · metrics 2.10.0
npm
jergason/recursive-readdir
Node.js module to list all files in a directory or any subdirectories.
MITSep 23, 2026 · metrics 2.10.0
—
note286/xdupgthesis
[停止维护 请使用note286/xduts]西安电子科技大学研究生学位论文XeLaTeX模板
LPPL-1.3cSep 19, 2026 · metrics 2.10.0
PyPI
Azure/azure-storage-python
Microsoft Azure Storage Library for Python
MITOct 24, 2026 · metrics 2.10.0
—
pawn-lang/compiler
Pawn compiler for SA-MP with bug fixes and new features - runs on Windows, Linux, macOS
Custom licenseSep 12, 2026 · metrics 2.10.0
RubyGems
ConsumerDataStandardsAustralia/standards
Work space for data standards development in Australia under the Consumer Data Right regime
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
funkia/hareactive
Purely functional reactive programming library
MITSep 26, 2026 · metrics 2.10.0
—
h3rald/min
A small but practical concatenative programming language and shell
MITOct 19, 2026 · metrics 2.10.0
crates.io
maciejhirsz/ramhorns
Fast Mustache template engine implementation in pure Rust.
MPL-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
readthedocs/recommonmark
A markdown parser for docutils
MITSep 10, 2026 · metrics 2.10.0
RubyGems
mitchellh/vagrant-google
Vagrant provider for GCE.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
RubyGems
attr-encrypted/encryptor
A simple wrapper for the standard ruby OpenSSL library
MITSep 12, 2026 · metrics 2.10.0
Packagist
enlightn/security-checker
A PHP dependency vulnerabilities scanner based on the Security Advisories Database.
MITSep 18, 2026 · metrics 2.10.0
Go
jackc/pgtype
No repository description published.
MITSep 23, 2026 · metrics 2.10.0
Go
EngoEngine/ecs
A Go-implementation of the Entity-Component-System paradigm
MITSep 27, 2026 · metrics 2.10.0
PyPI
al45tair/netifaces
No repository description published.
MITSep 14, 2026 · metrics 2.10.0
npm
d3/d3-time-format
Parse and format times, inspired by strptime and strftime.
ISCOct 21, 2026 · metrics 2.10.0
NuGet
dsplaisted/strongnamer
No repository description published.
MITSep 12, 2026 · metrics 2.10.0
Packagist
friends-of-reactphp/mysql
Async MySQL database client for ReactPHP.
MITSep 13, 2026 · metrics 2.10.0
PyPI
rougier/freetype-py
Python binding for the freetype library
Custom licenseSep 12, 2026 · metrics 2.10.0
crates.io
tailhook/quick-error
A rust-macro which makes errors easy to write
Apache-2.0Sep 17, 2026 · metrics 2.10.0