Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,287
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
RaspberryPiFoundation/blockly-keyboard-experimentation
No repository description published.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
SC-Networks/deepl-api-connector
Connector library for deepl.com rest translation api
MITSep 14, 2026 · metrics 2.10.0
Packagist
Vendic/hyva-checkout-create-account
Add a create account option to the Hyvä checkout for Magento 2
MITOct 20, 2026 · metrics 2.10.0
npm
alexbrazier/simple-update-notifier
Simple update notifier to check for npm updates for cli applications
MITSep 23, 2026 · metrics 2.10.0
RubyGems
alloy/mocha-on-bacon
Because it's yummy!
MITSep 12, 2026 · metrics 2.10.0
PyPI
andhus/scantree
Flexible recursive directory iterator: `scandir` meets `glob("**", recursive=True)`
MITOct 24, 2026 · metrics 2.10.0
—
basho/erlcloud
Cloud Computing library for erlang (Amazon EC2, S3, SQS, SimpleDB, Mechanical Turk, ELB)
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
calebdw/larastan
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
MITSep 17, 2026 · metrics 2.10.0
RubyGems
chef/chefstyle
Version Pinned RuboCop with Chef approved Cop list for linting software - NOT FOR COOKBOOKS
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
commitdev/zero-aws-eks-stack
zero module for a basic AWS kubernetes stack on EKS
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
cspotcode/node-source-map-support
Adds source map support to node.js (for stack traces)
MITSep 16, 2026 · metrics 2.10.0
Go
davidmz/go-pageant
Package pageant provides an interface to PyTTY pageant.exe utility.
MITSep 23, 2026 · metrics 2.10.0
Packagist
deprecated-packages/symfony-php-config
[DEPRECATED] Inlined in Rector/ECS directly as just 1 class
MITAug 17, 2026 · metrics 2.10.0
npm
desandro/get-style-property
quick & dirty CSS property testing
No licenseOct 19, 2026 · metrics 2.10.0
RubyGems
doudou/flexmock
Flexible mocking for Ruby testing
MITSep 11, 2026 · metrics 2.10.0
crates.io
dusk-network/microkelvin
No repository description published.
MPL-2.0Sep 23, 2026 · metrics 2.10.0
Hex
elixir-gettext/expo
Low-level Elixir parser for GNU Gettext files (PO, POT, MO).
Apache-2.0Oct 25, 2026 · metrics 2.10.0
PyPI
firedrakeproject/tsfc
(ARCHIVED) Two-stage form compiler
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
foliojs/codepoints
A parser for files in the Unicode database
MITSep 10, 2026 · metrics 2.10.0
Hex
gleam-lang/regexp
📇 Regular expressions in Gleam!
No licenseSep 9, 2026 · metrics 2.10.0
Go
gotify/plugin-api
The Plugin-API supported by gotify/server.
MITSep 19, 2026 · metrics 2.10.0
crates.io
hawkw/matchers
No repository description published.
MITSep 17, 2026 · metrics 2.10.0
Go
kairos-io/kairos-init
:seedling: Kairos init will transform a normal docker image into a Kairos flavored one
No licenseSep 10, 2026 · metrics 2.10.0
—
luxonis/depthai-shared
DepthAI Shared code and data
MITSep 11, 2026 · metrics 2.10.0
Hex
mathieuprog/changeset_helpers
Functions to help working with nested changesets and associations
Apache-2.0Sep 9, 2026 · metrics 2.10.0
—
maxmind/MaxMind-DB-Reader-perl
Read MaxMind DB files and look up IP addresses
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
mcsakoff/pydigitemp
Python implementation of 1-Wire protocol.
Custom licenseOct 20, 2026 · metrics 2.10.0
Packagist
mineadmin/mine-core
mineadmin core package
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
palmetto/palmetto-design-tokens
Design tokens that power all Palmetto UIs.
MITOct 21, 2026 · metrics 2.10.0
crates.io
paritytech/rust-secp256k1
Rust language bindings for Bitcoin secp256k1 library.
CC0-1.0Sep 20, 2026 · metrics 2.10.0