Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,759
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
matttproud/golang_protobuf_extensions
Support for streaming Protocol Buffer messages for the Go language (golang).
Apache-2.0Jul 30, 2026 · metrics 2.10.0
PyPI
Breakthrough-Energy/PowerSimData
Simulation framework
MITAug 17, 2026 · metrics 2.10.0
Go
SirusCodes/AntiLang
An esoteric language with an aim to break all the programming conventions
MITSep 6, 2026 · metrics 2.10.0
PyPI
asottile-archive/flake8-2020
flake8 plugin which checks for misuse of `sys.version` or `sys.version_info`
MITAug 8, 2026 · metrics 2.10.0
PyPI
atdt/monotonic
An implementation of time.monotonic() for Python 2 & Python 3
Apache-2.0Jul 18, 2026 · metrics 2.10.0
Hex
bitwalker/ex_unit_clustered_case
An extension for ExUnit for simplifying tests against a clustered application
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
easydynamics/oscal-react-library
A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.
MITJul 18, 2026 · metrics 2.10.0
Maven
subutai-io/peer-os
Subutai is a next generation peer to peer (P2P) cloud computing and Internet of Things platform. Subutai peers collaborate and share resources to create secure virtual environments tying together the shared network and machine resources across peers.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
—
JuliaServices/AutoHashEquals.jl
A Julia macro to add == and hash() to composite types.
Custom licenseAug 8, 2026 · metrics 2.10.0
PyPI
Placekey/placekey-py
No repository description published.
Apache-2.0Jul 24, 2026 · metrics 2.10.0
crates.io
PoC-Consortium/engraver
PoCC Burstcoin Reference Plotter
MITAug 23, 2026 · metrics 2.10.0
crates.io
alexcrichton/scoped-tls
Scoped Thread Local Storage for Rust
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
ferrilab/ferrilab
Experimenting with Rust's fundamental data model
MITAug 8, 2026 · metrics 2.10.0
—
mirage/functoria
A DSL to invoke otherworldly functors
ISCJul 19, 2026 · metrics 2.10.0
Packagist · npm
oat-sa/tao-core
main extension of TAO
GPL-2.0Sep 8, 2026 · metrics 2.10.0
PyPI
pyupio/dparse
A parser for Python dependency files
MITAug 27, 2026 · metrics 2.10.0
npm
sindresorhus/merge-streams
Merge multiple streams into a unified stream
MITAug 4, 2026 · metrics 2.10.0
Packagist
spiral/roadrunner-bridge
🌉 RoadRunner bridge to Spiral Framework
MITJul 22, 2026 · metrics 2.10.0
Go
xanzy/ssh-agent
Create a new SSH agent on any type of OS (so including Windows)
Apache-2.0Jul 28, 2026 · metrics 2.10.0
—
Fractions-DotNet/Fractions
A fraction data type to calculate with rational numbers.
MITAug 4, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-asn1
Contains parsers and serializers for ASN.1 (currently BER only)
MITAug 31, 2026 · metrics 2.10.0
—
monochromegane/go-gitignore
A fast gitignore matching library for Go.
MITAug 29, 2026 · metrics 2.10.0
npm
n8n-io/localtunnel
exposes your localhost to the world
MITJul 16, 2026 · metrics 2.10.0
RubyGems
natalie-lang/natalie_parser
NatalieParser is a zero-dependency, from-scratch, hand-written recursive descent parser for the Ruby Programming Language.
MITJul 19, 2026 · metrics 2.10.0
Packagist
paragonie/corner
Exceptions and Errors made more user-friendly
No licenseJul 22, 2026 · metrics 2.10.0
npm
peterszombati/xapi-node
xStation5 Trading API for NodeJS/JS
Custom licenseJul 24, 2026 · metrics 2.10.0
—
uskr/jsonrpc-lean
Lightweight, fast, transport-agnostic, c++ implementation of the JSON-RPC 2.0 specification
LGPL-3.0Aug 1, 2026 · metrics 2.10.0
npm
AppiumTestDistribution/appium-gestures-plugin
Appium plugin designed to perform gestures using W3C Actions.
No licenseAug 1, 2026 · metrics 2.10.0
Packagist
TransbankDevelopers/transbank-sdk-php
Código fuente Transbank SDK para PHP
BSD-3-ClauseAug 18, 2026 · metrics 2.10.0
—
aedobbyn/covid19us
R package for the COVID Tracking Project API providing US COVID-19 data
Custom licenseSep 8, 2026 · metrics 2.10.0