Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
578B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
sanity-io/icons
No repository description published.
MITAug 22, 2026 · metrics 2.10.0
crates.io
sfackler/shell-escape
No repository description published.
Apache-2.0Aug 1, 2026 · metrics 2.10.0
crates.io
sgodwincs/ordered-multimap-rs
An ordered multimap.
MITAug 13, 2026 · metrics 2.10.0
Go
snapp-incubator/argocd-complementary-operator
Manage your ArgoCD users and project with ease and some labels!
No licenseJul 17, 2026 · metrics 2.10.0
—
terracoin/terracoin
Terracoin - A cryptocurrency for the world!
MITAug 1, 2026 · metrics 2.10.0
crates.io
thomcc/fast-srgb8
Fast conversion between linear float and 8-bit sRGB
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Packagist
yiisoft/error-handler
Framework independent advanced error handler
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/log-target-file
Yii Logging Library - File Target
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/proxy
General purpose proxy
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Go
AZ-X/pique
An advanced DNS stub with Freedom, Privacy and Security --- THRICE UPON A TIME
LGPL-3.0Aug 4, 2026 · metrics 2.10.0
Packagist
Guzzle3/parser
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Parser component. Provides parsing interfaces for Cookies, HTTP messages, and URI Templates
No licenseJul 25, 2026 · metrics 2.10.0
Go
Jille/raft-grpc-leader-rpc
Send gRPCs to your Raft leader
BSD-2-ClauseJul 28, 2026 · metrics 2.10.0
npm
OffCourse/offcourse-next
Repository for open source contribution to the Offcourse platform. Open to Javascript developers of all levels!
MITSep 5, 2026 · metrics 2.10.0
PyPI
VonderVuflya/Yggdrasil
Durable, local-first memory for AI coding agents over MCP — zero-dependency, curated & semantically de-duped, you own the data (SQLite + Markdown). Works with Claude Code, Codex & any MCP host.
AGPL-3.0Jul 20, 2026 · metrics 2.10.0
Go
Zweih/qp
qp - Query Packages. Query installed packages across ecosystems on Linux and macOS.
GPL-3.0Aug 30, 2026 · metrics 2.10.0
—
buildkite/test-collector-ruby
Moved to buildkite/bktest — Buildkite Test Engine collector for Ruby test frameworks
No licenseAug 26, 2026 · metrics 2.10.0
RubyGems
excid3/acts_as_tenant
Easy multi-tenancy for Rails in a shared database setup.
MITJul 26, 2026 · metrics 2.10.0
npm
hughsk/is-typedarray
Detect whether or not an object is a Typed Array
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
jenisys/parse_type
parse_type extends the "parse" module (opposite of "string.format()")
MITAug 27, 2026 · metrics 2.10.0
crates.io · Go
kroma-network/zkevm-circuits
This is a mirror of zkevm-circuits(https://github.com/scroll-tech/zkevm-circuits).
MITAug 16, 2026 · metrics 2.10.0
npm
mahdyar/ansi-html-community
An elegant lib that converts the chalked text to HTML.
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
octokit/plugin-enterprise-server.js
Octokit plugin for GitHub Enterprise REST APIs
MITAug 4, 2026 · metrics 2.10.0
Packagist
sajya/client
JSON-RPC 2.0 HTTP(S) Client
MITJul 22, 2026 · metrics 2.10.0
Packagist
yiisoft/assets
Assets management
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/cookies
Convenient way to use cookies with PSR-7
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/var-dumper
Helper for dumping variable for debug purposes
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
yiisoft/yii-middleware
Yii-specific middleware
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
IndigoUnited/js-err-code
Create error instances with a code
No licenseAug 29, 2026 · metrics 2.10.0
Go
MuratDoganer/seer
No repository description published.
Apache-2.0Sep 7, 2026 · metrics 2.10.0
—
OpenMiNET/OpenMiNET
Custom MiNET Plugin API - Making it easier for multiple plugins to work together nicely.
LGPL-3.0Aug 5, 2026 · metrics 2.10.0