Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,609
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
572B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
datenlord/s3-server
Generic S3 server implementation
MITAug 22, 2026 · metrics 2.10.0
PyPI
sendgrid/python-http-client
Twilio SendGrid's Python HTTP Client for calling APIs
MITAug 27, 2026 · metrics 2.10.0
Packagist
webflo/drupal-finder
No repository description published.
GPL-2.0Aug 4, 2026 · metrics 2.10.0
npm
AckerApple/angular-file
Angular components for user file select, drop, and more
MITSep 8, 2026 · metrics 2.10.0
—
googleapis/python-texttospeech
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-texttospeech
Apache-2.0Jul 29, 2026 · metrics 2.10.0
npm
janosh/svelte-toc
Sticky responsive table of contents component
MITAug 4, 2026 · metrics 2.10.0
npm
pkgjs/parseargs
Polyfill of `util.parseArgs()`
MITAug 4, 2026 · metrics 2.10.0
RubyGems
ahoward/systemu
univeral capture of stdout and stderr and handling of child process pid for windows, *nix, etc.
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
estools/esutils
utility box for ECMAScript language tools
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
PyPI
kyrus/python-junit-xml
A Python module for creating JUnit XML test result documents that can be read by tools such as Jenkins. If you are ever working with test tool or test suite written in Python and want to take advantage of Jenkins' pretty graphs and test reporting capabilities, this module will let you generate the XML test reports.
MITAug 27, 2026 · metrics 2.10.0
PyPI
JDongian/python-jamo
Hangul syllable decomposition and synthesis using jamo.
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Maven
bannedbook/ssvpn
No repository description published.
GPL-3.0Aug 1, 2026 · metrics 2.10.0
PyPI
mike-oakley/openapi-pydantic
Modern, type-safe OpenAPI schemas in Python using Pydantic 1.8+ and 2.x
Custom licenseAug 4, 2026 · metrics 2.10.0
—
AntelopeIO/leap
C++ implementation of the Antelope protocol
Custom licenseSep 5, 2026 · metrics 2.10.0
PyPI
JBKahn/flake8-print
flake8
MITJul 30, 2026 · metrics 2.10.0
Maven
KevinStern/software-and-algorithms
Neat algorithm implementations in Java.
MITAug 22, 2026 · metrics 2.10.0
crates.io
droundy/internment
Interning of data in rust
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
feross/ieee754
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object.
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
octokit/auth-token.js
GitHub API token authentication for browsers and Node.js
MITAug 4, 2026 · metrics 2.10.0
Packagist
pmmp/BedrockData
Blobs of data generated from Minecraft: Bedrock Edition used by PocketMine-MP
CC0-1.0Aug 23, 2026 · metrics 2.10.0
PyPI
Noctem/Monocle
PoGo mapper and notifier
MITAug 1, 2026 · metrics 2.10.0
—
googleapis/python-bigquery-storage
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-bigquery-storage
Apache-2.0Jul 29, 2026 · metrics 2.10.0
PyPI · npm
schettino72/sphinx_press_theme
A Sphinx-doc theme based on Vuepress
Custom licenseAug 29, 2026 · metrics 2.10.0
npm
TritonDataCenter/node-assert-plus
Extra assertions on top of node's assert module
MITAug 31, 2026 · metrics 2.10.0
PyPI
apple/ccs-pykerberos
Python Kerberos library used by CalendarServer
Apache-2.0Aug 19, 2026 · metrics 2.10.0
NuGet
madeyoga/AuthEndpoints
A simple jwt library for aspnetcore that provides a set of minimal api endpoints to handle authentication actions
MITJul 24, 2026 · metrics 2.10.0
crates.io
sebastienrousseau/serde_yml
[DEPRECATED] Final release is a thin compatibility shim. RUSTSEC-2025-0068 structurally fixed in 0.0.13. Migrate to a maintained alternative — see MIGRATION.md.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
crates.io
google/json5format
JSON5 (a.k.a., "JSON for Humans") formatter that preserves contextual comments
BSD-3-ClauseAug 17, 2026 · metrics 2.10.0
npm
oceanprotocol/ocean.js
🦑 Ocean Protocol JavaScript library to privately & securely publish, exchange, and consume data.
Apache-2.0Jul 22, 2026 · metrics 2.10.0
npm
sindresorhus/is-interactive
Check if stdout or stderr is interactive
MITAug 4, 2026 · metrics 2.10.0