Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,774
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
547B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
Blendyyy/password-analyzer
Analyse de la robustesse de mots de passe en via l'entropie, détecte les faiblesses et vérifie les violations de sécurité grâce à HavelBeenPwned - le tout en local.
MITAug 2, 2026 · metrics 2.10.0
NuGet
BlueChilli/ChilliSource.Cloud.Core
ChilliSoure.Cloud.Core is a collection of .NET Standard libraries containing reusable helpers, extensions, and abstractions that are shared across all ChilliSource 'Cloud' projects.
MITAug 24, 2026 · metrics 2.10.0
crates.io
BreadchainCoop/commonware-avs-node
No repository description published.
Apache-2.0Aug 23, 2026 · metrics 2.10.0
npm · Maven
Digia-Technology-Private-Limited/digia_engage
[ARCHIVED] Digia Engage monorepo — split into individual de_* repos. See: github.com/Digia-Technology-Private-Limited/de_workspace
No licenseJul 29, 2026 · metrics 2.10.0
—
DillerOFire/aospdevel-nix
nixshell for aosp related stuff
No licenseAug 2, 2026 · metrics 2.10.0
—
Duzopy/Masangsoft-4th-Playtest
Masangsoft 4th Playtest
No licenseAug 2, 2026 · metrics 2.10.0
Go
Edge-Center/edgecentercdn-go
EdgeCenter CDN SDK for the Go programming language.
No licenseJul 20, 2026 · metrics 2.10.0
npm
EldritchForgeWorks/foundryvtt-dnd5e-types
No repository description published.
MITJul 31, 2026 · metrics 2.10.0
Go
ElfAstAhe/go-service-template
Проект шаблона сервиса/микро-сервиса, библиотека, хелперы и вспомогательные типы
No licenseJul 19, 2026 · metrics 2.10.0
Go
ElfAstAhe/tiny-auth-service
Сервис аутентификации и авторизации
No licenseJul 21, 2026 · metrics 2.10.0
—
Elhison/Cancel-That-Person
Cancel that person!
MITAug 2, 2026 · metrics 2.10.0
npm · Maven
ExodusForks/react-native-netinfo
React Native Network Info API for Android & iOS
MITJul 22, 2026 · metrics 2.10.0
npm
ExodusOSS/patch-broken-hermes-typed-arrays
Attempt to fix broken Hermes engine TypedArray implementation for React Native
MITJul 22, 2026 · metrics 2.10.0
npm
FormidableLabs/formidable-oss-badges
Dynamic SVG badges for Formidable OSS projects
MITJul 27, 2026 · metrics 2.10.0
npm
Furtif/pogo-protos
No repository description published.
MITJul 16, 2026 · metrics 2.10.0
crates.io
Henneberg-Systemdesign/devsync
Backup tool for developers
GPL-3.0Aug 28, 2026 · metrics 2.10.0
NuGet
HippoValidator/FluentLinkChecker
A fluent api for doing broken link checks of web resources.
Apache-2.0Jul 16, 2026 · metrics 2.10.0
PyPI
IBM/ibm-cos-sdk-python-s3transfer
ibm-cos-sdk-python-s3transfer
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Go
IceCodeNew/mtg
Highly opinionated MTPROTO proxy for Telegram
MITJul 19, 2026 · metrics 2.10.0
—
InfiniTimeOrg/lvgl
Fork of LVGL v7 for InfiniTime
MITJul 29, 2026 · metrics 2.10.0
Packagist
JBZoo/Toolbox-Dev
Package includes tools to debug and gathering stats for all JBZoo projects.
MITAug 13, 2026 · metrics 2.10.0
—
JancoNel/SAAES
No repository description published.
Custom licenseAug 2, 2026 · metrics 2.10.0
npm
KingDarBoja/vscode-icons
Icons for Visual Studio Code
MITJul 26, 2026 · metrics 2.10.0
Go · npm
KirillBaranov/figma-map
The ground-truth layer that lets AI coding agents build pixel-perfect UI from Figma.
MITJul 20, 2026 · metrics 2.10.0
Packagist
LastDragon-ru/lara-asp-eloquent
Contains useful extensions and mixins for Eloquent.
MITJul 27, 2026 · metrics 2.10.0
Maven
LeMyst/jmxterm
Interactive command line JMX client (with up-to-date dependencies)
Apache-2.0Jul 25, 2026 · metrics 2.10.0
—
LessThread/Mini-Toolkit
No repository description published.
No licenseAug 2, 2026 · metrics 2.10.0
Maven
M0cKuPC0dE/xmlmapping
https://jirawong.wordpress.com/2013/08/10/hibernate-4-example-xml-mapping-style/
No licenseAug 2, 2026 · metrics 2.10.0
NuGet
MONQDL/Monq.Core.BasicDotNetMicroservice
NetCore Microservice extensions library that brings simplicity to configure asp.net and console programs as microservices
MITAug 4, 2026 · metrics 2.10.0
npm
MadcowD/gmail.js
Gmail JavaScript API
MITAug 1, 2026 · metrics 2.10.0