Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,221
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
deepset-ai/canals
A component orchestration engine
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
deprecated-packages/auto-bind-parameter
[DEPRECATED] [READ-ONLY] Auto bind parameters in for your Symfony applications
MITSep 16, 2026 · metrics 2.10.0
npm
eventualbuddha/lines-and-columns
Maps lines and columns to character offsets and back.
MITSep 16, 2026 · metrics 2.10.0
Packagist · npm
jfeltkamp/cookiesjsr
Easily expandable cookie consent tool.
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
njzjz/openbabel-wheel
No repository description published.
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
octokit/webhooks-methods.js
Methods to handle GitHub Webhook requests
MITSep 16, 2026 · metrics 2.10.0
npm
humanwhocodes/module-importer
Universal importer for CommonJS and ESM in Node.js
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
myrrlyn/wyz
myrrlyn’s wyzyrdly library
MITSep 17, 2026 · metrics 2.10.0
crates.io
qwandor/anes-rs
ANSI Escape Sequence provider & parser
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
tmobile/jazz-installer
Installer for Jazz Serverless Developer Platform!
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
SimonSapin/rust-utf8
Incremental, zero-copy UTF-8 decoding for Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
arcanis/jest-pnp-resolver
Transparently adds support for Plug'n'Play to Jest
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
elastic/enterprise-search-php
Elastic Enterprise Search Official PHP Client
MITSep 16, 2026 · metrics 2.10.0
—
ndmitchell/derive
A Haskell program and library to derive instances for data types
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Packagist
phpowermove/docblock
PHP DocBlock parser and generator. An API to read and write DocBlocks.
MITSep 18, 2026 · metrics 2.10.0
Go
sivchari/containedctx
containedctx is a linter that detects struct contained context.Context field
MITSep 16, 2026 · metrics 2.10.0
Go
Azure/terraform-azurerm-hubnetworking
Terraform verified module for deploying multi-hub & spoke architectures
MITSep 19, 2026 · metrics 2.10.0
Go
KeisukeYamashita/go-vcl
🐇 VCL parser written in Go
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
OneKeyHQ/cross-inpage-provider
No repository description published.
Custom licenseSep 18, 2026 · metrics 2.10.0
RubyGems · npm
davidwessman/syntax_tree-erb
Syntax Tree support for ERB
MITSep 19, 2026 · metrics 2.10.0
crates.io
dfinance/dvm
dfinance Virtual Machine for Move language
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
knownasilya/cli-width
Fallback to a default if `process.stdout.getWindowSize` doesn't exist
ISCSep 16, 2026 · metrics 2.10.0
npm
msobkyy/backbook-server
Mern Facebook Clone with real time Messages Server (MongoDB, Express.js, React.js, Node.js, and Socket.io)
No licenseSep 17, 2026 · metrics 2.10.0
—
sparkfun/SparkFun_SerLCD_Arduino_Library
A library to seamlessly control the SparkFun SerLCD over I2C, SPI, and Serial.
MITSep 21, 2026 · metrics 2.10.0
Packagist
spatie/Laravel-Excel
🚀 Supercharged Excel exports and imports in Laravel
MITSep 17, 2026 · metrics 2.10.0
Packagist
spiral/attributes
PHP Attributes Reader. Subtree split of the Spiral Attributes component (see spiral/framework)
MITSep 18, 2026 · metrics 2.10.0
npm
sprintertech/sygma-solidity
No repository description published.
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
mohammedfathi92/powerful-open-source-crm-mz
Please do not send pull requests and issues.
No licenseSep 19, 2026 · metrics 2.10.0
Go
AZ-X/pique
An advanced DNS stub with Freedom, Privacy and Security --- THRICE UPON A TIME
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
Ahmedhossamdev/PrintLayout
PrintLayout: A lightweight Go tool to visualize project directory structures in a clean, tree-like format. Perfect for exploring codebases, documenting projects, or understanding file organization at a glance. Simple, customizable, and developer-friendly.
MITSep 20, 2026 · metrics 2.10.0