Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,490
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
spyoungtech/grequests
Requests + Gevent = <3
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
fixie-ai/ultravox
A fast multimodal LLM for real-time voice
MITSep 18, 2026 · metrics 2.10.0
PyPI
RUCAIBox/RecBole
A unified, comprehensive and efficient recommendation library
MITSep 20, 2026 · metrics 2.10.0
npm
sweet-js/sweet-core
Sweeten your JavaScript.
BSD-2-ClauseAug 28, 2026 · metrics 2.10.0
RubyGems
github/gemoji
Emoji images and names.
MITAug 28, 2026 · metrics 2.10.0
Go
orcaman/concurrent-map
a thread-safe concurrent map for go
MITSep 23, 2026 · metrics 2.10.0
PyPI
spulec/freezegun
Let your Python tests travel through time
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
uber-go/dig
A reflection based dependency injection toolkit for Go.
MITOct 21, 2026 · metrics 2.10.0
npm
jonschlinkert/gray-matter
Smarter YAML front matter parser, used by metalsmith, Gatsby, Netlify, Assemble, mapbox-gl, phenomic, vuejs vitepress, TinaCMS, Shopify Polaris, Ant Design, Astro, hashicorp, garden, slidev, saber, sourcegraph, and many others. Simple to use, and battle tested. Parses YAML by default but can also parse JSON Front Matter, Coffee Front Matter, TOML Front Matter, and has support for custom parsers. Please follow gray-matter's author: https://github.com/jonschlinkert
MITSep 17, 2026 · metrics 2.10.0
RubyGems
ctran/annotate_models
Annotate Rails classes with schema and routes info
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
JonathanSalwan/ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go · npm
improbable-eng/grpc-web
gRPC Web implementation for Golang and TypeScript
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
jung-kurt/gofpdf
A PDF document generator with high level support for text, drawing and images
MITOct 18, 2026 · metrics 2.10.0
npm
facebook/prop-types
Runtime type checking for React props and similar objects
MITSep 16, 2026 · metrics 2.10.0
npm
pieroxy/lz-string
LZ-based compression algorithm for JavaScript
MITSep 17, 2026 · metrics 2.10.0
PyPI
matplotlib/mplfinance
Financial Markets Data Visualization using Matplotlib
Custom licenseSep 17, 2026 · metrics 2.10.0
—
canonical/dqlite
Embeddable, replicated and fault-tolerant SQL engine.
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
DistrictDataLabs/yellowbrick
Visual analysis and diagnostic tools to facilitate machine learning model selection.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
Xabaril/AspNetCore.Diagnostics.HealthChecks
Enterprise HealthChecks for ASP.NET Core Diagnostics Package
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
swimlane/ngx-charts
:bar_chart: Declarative Charting Framework for Angular
MITAug 28, 2026 · metrics 2.10.0
npm
bramstein/fontfaceobserver
Webfont loading. Simple, small, and efficient.
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
webpack/css-loader
CSS Loader
MITSep 17, 2026 · metrics 2.10.0
PyPI
speedyapply/JobSpy
Jobs scraper library for LinkedIn, Indeed, Glassdoor, Google, ZipRecruiter & more
MITSep 17, 2026 · metrics 2.10.0
Packagist · npm
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
MITAug 28, 2026 · metrics 2.10.0
PyPI
richzhang/PerceptualSimilarity
LPIPS metric. pip install lpips
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
konstaui/konsta
Mobile UI components made with Tailwind CSS
MITSep 27, 2026 · metrics 2.10.0
Go
whalebrew/whalebrew
Homebrew, but with Docker images
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
nefarius/ViGEmBus
Windows kernel-mode driver emulating well-known USB game controllers.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Go
swaggo/gin-swagger
gin middleware to automatically generate RESTful API documentation with Swagger 2.0.
MITSep 23, 2026 · metrics 2.10.0
Go · npm · PyPI
kubeflow/pipelines
Machine Learning Pipelines for Kubeflow
Apache-2.0Sep 17, 2026 · metrics 2.10.0