Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,417
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
stumpy-dev/stumpy
STUMPY is a powerful and scalable Python library for modern time series analysis
Custom licenseSep 17, 2026 · metrics 2.10.0
NuGet
umlx5h/LLPlayer
The media player for language learning, with dual subtitles, AI-generated subtitles, real-time translation, and more!
GPL-3.0Sep 17, 2026 · metrics 2.10.0
Maven
Cateners/tiny_container
Click-to-run debian 13 with desktop environment on android!
GPL-3.0Sep 14, 2026 · metrics 2.10.0
PyPI
ansible/molecule
An ansible-native testing framework for collections, playbooks, and roles with configurable workflows for testing any system or service
MITSep 17, 2026 · metrics 2.10.0
npm
Alex-D/Trumbowyg
A lightweight and amazing WYSIWYG JavaScript editor under 10kB
MITSep 19, 2026 · metrics 2.10.0
PyPI
cpm-cmake/CPM.cmake
📦 CMake's missing package manager. A small CMake script for setup-free, cross-platform, reproducible dependency management.
MITOct 24, 2026 · metrics 2.10.0
Go
tdewolff/minify
Go minifiers for web formats
MITOct 21, 2026 · metrics 2.10.0
npm
AzureAD/microsoft-authentication-library-for-js
Microsoft Authentication Library (MSAL) for JS
MITOct 24, 2026 · metrics 2.10.0
npm
vvo/iron-session
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
MITOct 5, 2026 · metrics 2.10.0
Maven · npm
tolgee/tolgee-platform
Developer & translator friendly web-based localization platform
Custom licenseOct 24, 2026 · metrics 2.10.0
Packagist
doctrine-extensions/DoctrineExtensions
Doctrine2 behavioral extensions, Translatable, Sluggable, Tree-NestedSet, Timestampable, Loggable, Sortable
MITOct 12, 2026 · metrics 2.10.0
RubyGems
troessner/reek
Code smell detector for Ruby
MITOct 24, 2026 · metrics 2.10.0
Go
go-ozzo/ozzo-validation
An idiomatic Go (golang) validation package. Supports configurable and extensible validation rules (validators) using normal language constructs instead of error-prone struct tags.
MITSep 23, 2026 · metrics 2.10.0
RubyGems
typhoeus/typhoeus
Typhoeus wraps libcurl in order to make fast and reliable requests.
MITOct 24, 2026 · metrics 2.10.0
PyPI
cartography-cncf/cartography
Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database.
Apache-2.0Oct 10, 2026 · metrics 2.10.0
crates.io
arxanas/git-branchless
High-velocity, monorepo-scale workflow for Git
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
MITOct 24, 2026 · metrics 2.10.0
Go
connectrpc/connect-go
The Go implementation of Connect: Protobuf RPC that works.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Maven
uber/NullAway
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
MITOct 24, 2026 · metrics 2.10.0
npm
Tencent/tdesign
Enterprise Design System
MITOct 24, 2026 · metrics 2.10.0
PyPI
asottile/pyupgrade
A tool (and pre-commit hook) to automatically upgrade syntax for newer versions of the language.
MITOct 24, 2026 · metrics 2.10.0
PyPI
aws/aws-sdk-pandas
pandas on AWS - Easy integration with Athena, Glue, Redshift, Timestream, Neptune, OpenSearch, QuickSight, Chime, CloudWatchLogs, DynamoDB, EMR, SecretManager, PostgreSQL, MySQL, SQLServer and S3 (Parquet, CSV, JSON and EXCEL).
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
linebender/resvg
An SVG rendering library.
Apache-2.0Oct 13, 2026 · metrics 2.10.0
Go
osrg/gobgp
BGP implemented in the Go Programming Language
Apache-2.0Oct 13, 2026 · metrics 2.10.0
npm
aykutkardas/regexlearn.com
Learn RegEx step by step, from zero to advanced.
MITOct 24, 2026 · metrics 2.10.0
crates.io
xacrimon/dashmap
Blazing fast concurrent HashMap for Rust.
MITSep 17, 2026 · metrics 2.10.0
PyPI · Go · Maven
bufbuild/protoc-gen-validate
Protocol Buffer Validation - replaced by https://github.com/bufbuild/protovalidate
Apache-2.0Oct 24, 2026 · metrics 2.10.0
crates.io
dprint/dprint
Pluggable and configurable code formatting platform that unifies all your formatters.
MITOct 24, 2026 · metrics 2.10.0
Go
bjarneo/cliamp
cliamp - Terminal music player inspired by winamp
MITSep 11, 2026 · metrics 2.10.0
Go
hashicorp/memberlist
Golang package for gossip based membership and failure detection
MPL-2.0Sep 23, 2026 · metrics 2.10.0