Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,471
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
crates.io
ZettaScaleLabs/stabby
A Stable ABI for Rust with compact sum-types
Custom licenseSep 12, 2026 · metrics 2.10.0
—
pwnnex/ByeByeVPN
Full TSPU/DPI/VPN detectability scanner. Scan any IP as a censor sees it.
GPL-3.0Oct 13, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-redis
Yii 2 Redis extension.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Packagist
mehdi-fathi/eloquent-filter
Eloquent Filter is a package for filter data of models by the query strings. Easy to use and fully dynamic.
MITOct 17, 2026 · metrics 2.10.0
Go
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
MITSep 16, 2026 · metrics 2.10.0
Maven
OpenIdentityPlatform/OpenDJ
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
Custom licenseSep 13, 2026 · metrics 2.10.0
npm · Maven
creevey/creevey
Cross-browser screenshot testing tool for Storybook with fancy UI Runner.
MITSep 15, 2026 · metrics 2.10.0
RubyGems
sporkmonger/uuidtools
A simple universally unique ID generation library.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-httpclient
Yii 2 HTTP client
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI · crates.io
awolverp/cachebox
The fastest memoizing and caching Python library written in Rust.
MITAug 27, 2026 · metrics 2.10.0
Packagist
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
MITOct 20, 2026 · metrics 2.10.0
—
Baystation12/Baystation12
Baystation's flavor of Space Station 13
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
—
leahneukirchen/bacon
a small RSpec clone
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-elasticsearch
Yii 2 Elasticsearch extension
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
feature-sliced/steiger
Universal file structure and project architecture linter
MITSep 12, 2026 · metrics 2.10.0
Packagist
temporalio/sdk-php
Temporal PHP SDK
MITSep 16, 2026 · metrics 2.10.0
PyPI
scrapy/w3lib
Python library of web-related functions
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
—
ReactiveBayes/RxInfer.jl
Julia package for automated Bayesian inference on a factor graph with reactive message passing
MITSep 12, 2026 · metrics 2.10.0
npm · Maven · RubyGems
matinzd/react-native-health-connect
React native library for health connect (Android only)
MITSep 15, 2026 · metrics 2.10.0
—
relevance/rcov
The new home of RCov on GitHub
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
NuGet
appium/dotnet-client
.NET C# bindings for Appium, extending the Selenium .NET library
Apache-2.0Sep 14, 2026 · metrics 2.10.0
NuGet
micro-elements/MicroElements.Swashbuckle.FluentValidation
Use FluentValidation rules instead of ComponentModel attributes
MITSep 12, 2026 · metrics 2.10.0
npm
microsoft/setup-msbuild
A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications.
MITSep 15, 2026 · metrics 2.10.0
Go
lamoda/gonkey
Gonkey - a testing automation tool
MITSep 12, 2026 · metrics 2.10.0
NuGet
AlexanderPro/WindowTextExtractor
WindowTextExtractor allows you to get a text from any window of an operating system including asterisk passwords
MITSep 16, 2026 · metrics 2.10.0
npm
colorjs/color-space
Open collection of color spaces
CC0-1.0Aug 27, 2026 · metrics 2.10.0
npm
nanostores/persistent
Smart store for Nano Stores state manager to keep data in localStorage
MITSep 14, 2026 · metrics 2.10.0
PyPI
aio-libs/aiosmtpd
A reimplementation of the Python stdlib smtpd.py based on asyncio.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
crates.io
gtk-rs/gtk-rs-core
Rust bindings for GNOME libraries
MITSep 18, 2026 · metrics 2.10.0