Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,167
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
lampsitter/egui_commonmark
Markdown viewer for egui
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
medikoo/es5-ext
ECMAScript extensions (with respect to upcoming ECMAScript features)
ISCSep 23, 2026 · metrics 2.10.0
npm
medikoo/es6-symbol
ECMAScript 6 Symbol polyfill
ISCSep 23, 2026 · metrics 2.10.0
crates.io
orium/archery
Abstract over the atomicity of reference-counting pointers in rust
MITSep 17, 2026 · metrics 2.10.0
npm
paulmillr/scure-base
Secure, audited & 0-deps implementation of bech32, base64, base32, base16 & base58
MITSep 23, 2026 · metrics 2.10.0
Packagist
yiisoft/yii2-sphinx
Yii 2 Sphinx extension.
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
—
ztangent/Julog.jl
A Julia package for Prolog-style logic programming.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
zwasm/zwasm
A fast, spec-compliant WebAssembly runtime written in Zig
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
RDFLib/OWL-RL
A simple implementation of the OWL2 RL Profile on top of RDFLib: it expands the graph with all possible triples that OWL RL defines. It can be used together with RDFLib to expand an RDFLib Graph object, or as a stand alone service with its own serialization.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
RoleModel/turbo-confirm
The easiest way to add custom confirmation dialog support to Rails apps.
MITSep 18, 2026 · metrics 2.10.0
Go
ZaparooProject/zaparoo-core
Core Zaparoo service software
GPL-3.0Sep 19, 2026 · metrics 2.10.0
RubyGems
activemerchant/payment_icons
An easy to use library that allows you to manage and access payment icons
MITSep 17, 2026 · metrics 2.10.0
Go
blendle/zapdriver
Blazing fast, Zap-based Stackdriver logging.
ISCSep 23, 2026 · metrics 2.10.0
crates.io
contain-rs/linked-hash-map
A HashMap wrapper that holds key-value pairs in insertion order
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
kaelzhang/node-comment-json
Parse and stringify JSON with comments. It will retain comments even when after saved!
Custom licenseSep 23, 2026 · metrics 2.10.0
Packagist
medz/id-card-of-china
🆔一个基于「公民身份号码」规则获取身份证号码中包含的基础信息组件（PHP）
MITSep 19, 2026 · metrics 2.10.0
—
qiniu/csharp-sdk
Qiniu Resource (Cloud) Storage SDK for C#
MITSep 19, 2026 · metrics 2.10.0
npm
release-it/conventional-changelog
Conventional changelog plugin for release-it
MITSep 17, 2026 · metrics 2.10.0
—
arnetheduck/nim-results
Friendly value-or-error type
Custom licenseSep 18, 2026 · metrics 2.10.0
RubyGems
hanami/hanami-view
Views, templates and presenters for Ruby web applications
MITSep 18, 2026 · metrics 2.10.0
npm · Go
iswalle/getnote-cli
Get笔记 CLI — 让人类和 AI Agent 都能在终端操作 Get笔记
MITSep 19, 2026 · metrics 2.10.0
npm
kurrent-io/KurrentDB-Client-NodeJS
KurrentDB NodeJS Client
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
nanoporetech/pod5-file-format
Pod5: a high performance file format for nanopore reads.
Custom licenseSep 21, 2026 · metrics 2.10.0
—
notaryproject/specifications
Cross tooling and interoperability specifications
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
nrfconnect/sdk-nrfxlib
Nordic common libraries
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
rudderlabs/rudder-sdk-js
JavaScript SDK for RudderStack - the Customer Data Platform for Developers.
MITSep 18, 2026 · metrics 2.10.0
npm
sindresorhus/npm-name
Check whether a package or organization name is available on npm
MITSep 18, 2026 · metrics 2.10.0
PyPI
smn2gnt/MCP-Salesforce
MCP Salesforce connector
MITSep 20, 2026 · metrics 2.10.0
npm
unjs/capnp-es
🔥 TypeScript implementation of the Cap'n Proto serialization.
Custom licenseSep 18, 2026 · metrics 2.10.0
Packagist
ActiveCampaign/postmark-php
The official PHP library for Postmark.
MITSep 17, 2026 · metrics 2.10.0