Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,324
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
RustCrypto/AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
No licenseSep 17, 2026 · metrics 2.10.0
Packagist
shetabit/payment
simple laravel payment package , supports multiple drivers
MITSep 15, 2026 · metrics 2.10.0
PyPI · npm
djlint/djLint
HTML template formatter and linter for Django, Jinja, Twig, Nunjucks, Handlebars, Liquid, Go templates, Mustache, Tera, Askama and Angular. Formats markup and template syntax together, and lints for accessibility, correctness and style. CLI, pre-commit hook and VS Code extension.
GPL-3.0Aug 27, 2026 · metrics 2.10.0
Maven · Go · npm
operator-framework/java-operator-sdk
Java SDK for building Kubernetes Operators
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
Adamant-im/adamant
ADAMANT Blockchain Node
GPL-3.0Sep 16, 2026 · metrics 2.10.0
crates.io
RustCrypto/password-hashes
Password hashing functions / KDFs
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
konatabrk/shellen
:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes
MITSep 16, 2026 · metrics 2.10.0
Go
flyingmutant/rapid
Rapid is a modern Go property-based testing library
MPL-2.0Oct 21, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
no-context/moo
Optimised tokenizer/lexer generator! 🐄 Uses /y for performance. Moo.
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
epam/ketcher
Web-based molecule sketcher
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
quasilyte/go-ruleguard
Define and run pattern-based custom linting rules.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
—
MyraUI/Myra
UI Library for MonoGame, FNA and Stride
MITSep 12, 2026 · metrics 2.10.0
npm
wp-statistics/GeoLite2-City
Free MaxMind GeoLite2-City database for IP geolocation. Auto-updated, served via jsDelivr CDN. No API keys required.
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
smi2/phpClickHouse
php ClickHouse wrapper
MITSep 24, 2026 · metrics 2.10.0
PyPI
yukinarit/pyserde
Yet another serialization library on top of dataclasses, inspired by serde-rs.
MITSep 20, 2026 · metrics 2.10.0
NuGet
DevTeam/Pure.DI
Pure DI for .NET
MITSep 12, 2026 · metrics 2.10.0
PyPI
ikvk/imap_tools
Work with email by IMAP
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
MyGUI/mygui
Fast, flexible and simple GUI.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
browserslist/update-db
CLI tool to update caniuse-lite to refresh target browsers from Browserslist config
MITSep 16, 2026 · metrics 2.10.0
PyPI
Xilinx-CNS/onload
OpenOnload high performance user-level network stack
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
gemini-testing/testplane
Testplane (ex-hermione) browser test runner based on mocha and wdio
MITSep 13, 2026 · metrics 2.10.0
npm
gemini-testing/looks-same
Node.js library for comparing images
MITSep 29, 2026 · metrics 2.10.0
Packagist
defstudio/telegraph
Telegraph is a Laravel package for fluently interacting with Telegram Bots
MITSep 12, 2026 · metrics 2.10.0
Hex
elixir-waffle/waffle
Flexible file upload and attachment library for Elixir
No licenseSep 9, 2026 · metrics 2.10.0
Packagist
JBZoo/Utils
Collection of useful PHP functions, mini-classes, and snippets for every day.
MITSep 12, 2026 · metrics 2.10.0
npm · Go
vshulcz/deja-vu
One memory shared by Claude Code, Codex, Cursor, Copilot CLI, OpenClaw and 20 more coding agents, built from the session history already on disk. A fix found in one agent comes back in any of them, including months of sessions from before you installed it. No LLM, no embeddings, one local Go binary.
MITSep 12, 2026 · metrics 2.10.0
Go
lesovsky/noisia
Harmful workload generator for PostgreSQL
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
npm
tabrindle/envinfo
Generate a report about your development environment for debugging and issue reporting
MITOct 20, 2026 · metrics 2.10.0
RubyGems
Envek/after_commit_everywhere
Use ActiveRecord transactional callbacks outside of models, literally everywhere in your application.
MITSep 11, 2026 · metrics 2.10.0