Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,243
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
ikalnytskyi/picobox
Dependency injection framework designed with Python in mind.
MITSep 17, 2026 · metrics 2.10.0
crates.io
nbaksalyar/rust-streaming-http-parser
Streaming HTTP parser for Rust, based on nodejs/http-parser
MITSep 19, 2026 · metrics 2.10.0
npm
storybook-eol/storybook-ui
REPO/PACKAGE MOVED - Core Storybook UI
MITSep 20, 2026 · metrics 2.10.0
npm
wesleytodd/setprototypeof
Polyfill for Object.setPrototypeOf
ISCSep 16, 2026 · metrics 2.10.0
Packagist
ConvertAPI/convertapi-library-php
A PHP library for the ConvertAPI
Custom licenseSep 19, 2026 · metrics 2.10.0
—
JuliaMath/TensorCore.jl
Lightweight package for sharing tensor-algebra definitions
MITSep 17, 2026 · metrics 2.10.0
npm
ModuleArt/ferny
Chromium-based web browser, built on top of Electron.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
Spomky-Labs/aes-key-wrap
Pure PHP library for AES Key Wrapping (RFC3394 and RFC5649)
MITSep 18, 2026 · metrics 2.10.0
npm
TykTechnologies/api-to-mcp
Turn any API to MCP tool
MITSep 20, 2026 · metrics 2.10.0
Packagist
baby-markt/deepl-php-lib
🧠 DeepL API Client Library supporting PHP >= 7.3
MITSep 18, 2026 · metrics 2.10.0
crates.io
jethrogb/rust-cexpr
A C expression parser and evaluator
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
VapiAI/client-sdk-react-native
This package lets you start Vapi calls directly in your React native.
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
arcnmx/serde-value
Serialization value trees
MITSep 18, 2026 · metrics 2.10.0
npm
jonschlinkert/is-windows
Returns true if the platform is Windows (and Cygwin or MSYS/MinGW for unit tests)
MITSep 16, 2026 · metrics 2.10.0
—
qu1x/huawei-wmi
Sets group write privileges and reinstates battery charge-thresholds.
No licenseSep 19, 2026 · metrics 2.10.0
—
JuliaReinforcementLearning/CommonRLInterface.jl
A minimal reinforcement learning environment interface with additional opt-in features.
MITSep 17, 2026 · metrics 2.10.0
crates.io
nvzqz/embed-plist-rs
Embed property list files like Info.plist directly in your Rust executable binary
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
quasilyte/gogrep
Syntax-aware Go code search, based on the mvdan/gogrep
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
sashamelentyev/usestdlibvars
A linter that detect the possibility to use variables/constants from the Go standard library.
MITSep 16, 2026 · metrics 2.10.0
—
JuliaGeometry/Contour.jl
Calculating contour curves for 2D scalar fields in Julia
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
catenacyber/perfsprint
Golang linter to use strconv
MITSep 16, 2026 · metrics 2.10.0
npm
dotCMS/core-web
dotCMS UI
No licenseSep 20, 2026 · metrics 2.10.0
—
meskio/tudu
A comand line interface to manage hierarchical todos
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
sindresorhus/path-key
Get the PATH environment variable key cross-platform
MITSep 16, 2026 · metrics 2.10.0
Go
AlekSi/hardcache
Tool for managing the Go build cache
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
crates.io
AltSysrq/rusty-fork
Run Rust tests in isolated subprocesses
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
Iotic-Labs/py-ubjson
Universal Binary JSON draft-12 serializer for Python
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm · Maven
NativeScript/capacitor
NativeScript for Capacitor
No licenseSep 16, 2026 · metrics 2.10.0
crates.io
dirs-dev/dirs-sys-rs
moved to https://codeberg.org/dirs/dirs-sys-rs
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
sbercloud-terraform/terraform-provider-sbercloud
Terraform SberCloud Provider
MPL-2.0Sep 17, 2026 · metrics 2.10.0