Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,611
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
norksec/usbwatchdog
usbWatchdog - monitor changes to your usb ports, and if anything is plugged in or removed, wipe RAM and shut down.
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
yiisoft/friendly-exception
An interface for an exception to be friendly
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/strings
String helper methods and an inflector
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-symfonymailer
Yii 2 Symfony mailer extension.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
JBZoo/Mermaid-PHP
Generate diagrams and flowcharts with the help of the mermaid script language
MITSep 12, 2026 · metrics 2.10.0
RubyGems
joker1007/crono_trigger
Simple Asynchronous Job Scheduler for Rails.
MITOct 22, 2026 · metrics 2.10.0
Go
quasilyte/gogrep
Syntax-aware Go code search, based on the mvdan/gogrep
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
sashamelentyev/usestdlibvars
A linter that detect the possibility to use variables/constants from the Go standard library.
MITSep 16, 2026 · metrics 2.10.0
Packagist
yiisoft/form
The package helps with implementing data entry forms
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
zhichkin/dajet-metadata
Библиотека для чтения метаданных 1С:Предприятие 8 из баз данных Microsoft SQL Server и PostgreSQL.
MITAug 28, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenICF
OpenICF is an open-source identity connector framework that integrates identity management systems with various resources. It enables secure provisioning, synchronization, and management of user accounts across diverse platforms and applications.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
catenacyber/perfsprint
Golang linter to use strconv
MITSep 16, 2026 · metrics 2.10.0
Packagist
yiisoft/cache
PSR-16 compatible cache library
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/data
Generic data abstractions: reading, writing, processing.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
AlekSi/hardcache
Tool for managing the Go build cache
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
NuGet
Geeksltd/Olive
Olive framework, for more productive cross platform .NET solutions. It's available under the GPL v3 license. See License.md for more information.
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
PeculiarVentures/asn1-schema
asn1-schema is a collection of TypeScript schemas that make working with common ASN.1 objects easy
No licenseSep 15, 2026 · metrics 2.10.0
npm
cube-js/cube-ui-kit
UI Framework for Cube Projects. Based on React Aria and tasty style engine.
MITOct 20, 2026 · metrics 2.10.0
Go
sbercloud-terraform/terraform-provider-sbercloud
Terraform SberCloud Provider
MPL-2.0Sep 17, 2026 · metrics 2.10.0
Go
deckhouse/virtualization
Virtualization module for Deckhouse Kubernetes Platform. This repository is a mirror of GitLab repository.
Custom licenseSep 12, 2026 · metrics 2.10.0
RubyGems · npm
fontist/fontist
Install openly-licensed fonts on Windows, Linux and Mac!
BSD-2-ClauseSep 25, 2026 · metrics 2.10.0
PyPI · crates.io
monosans/pyromark
Blazingly fast Markdown parser for Python written in Rust.
MITOct 16, 2026 · metrics 2.10.0
PyPI
reagento/dature
No repository description published.
Apache-2.0Oct 16, 2026 · metrics 2.10.0
Packagist
timeweb/phpstan-enum
Enum class reflection extension for PHPStan
MITOct 23, 2026 · metrics 2.10.0
Packagist
yiisoft/mailer
Generic mailer
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
NuGet
ProKn1fe/WebView2.Runtime
Webview2 runtime nuget packages for Fixed Version distribution.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
VKCOM/vkui-tokens
No repository description published.
MITSep 16, 2026 · metrics 2.10.0
NuGet
diadoc/diadocsdk-csharp
Official Diadoc SDK for C#
MITSep 14, 2026 · metrics 2.10.0
PyPI
emmetio/py-emmet
Emmet abbreviation parser and expander, implemented in Python
MITSep 11, 2026 · metrics 2.10.0
npm
gravity-ui/navigation
No repository description published.
MITSep 12, 2026 · metrics 2.10.0