Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,260
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
mafintosh/multicast-dns
Low level multicast-dns implementation in pure javascript
MITAug 31, 2026 · metrics 2.10.0
PyPI
lightkurve/lightkurve
A friendly package for Kepler & TESS time series analysis in Python.
MITSep 6, 2026 · metrics 2.10.0
Packagist
aliyun/openapi-sdk-php
The Alibaba Cloud V1.0 SDK will soon enter the Basic Security Maintenance phase and is no longer recommended for use. V2.0 SDK is available here: https://github.com/aliyun/alibabacloud-php-sdk
Custom licenseSep 1, 2026 · metrics 2.10.0
Packagist
tighten/tlint
Tighten linter for Laravel conventions.
MITSep 1, 2026 · metrics 2.10.0
—
MixinNetwork/ios-app
📱iOS private messenger, crypto wallet and light node to Mixin Network
GPL-3.0Sep 6, 2026 · metrics 2.10.0
npm
i18next/i18next-http-backend
i18next-http-backend is a backend layer for i18next using in Node.js, in the browser and for Deno.
MITAug 31, 2026 · metrics 2.10.0
npm
sysgears/webpack-virtual-modules
Webpack Virtual Modules is a webpack plugin that lets you create, modify, and delete in-memory files in a way that webpack treats them as if they were physically presented in the file system.
MITAug 31, 2026 · metrics 2.10.0
npm · Maven
hhszzzz/taibu
🔮 高精度AI算命工具，涵盖八字、紫微斗数、六爻、梅花易数、奇门遁甲、大六壬、小六壬、占星术、太乙神数、塔罗、MBTI、面相手相、合盘配对、每日/每月运势、周公解梦等。支持MCP服务和Skills
Custom licenseSep 2, 2026 · metrics 2.10.0
npm · PyPI
8beeeaaat/touchdesigner-mcp
MCP server for TouchDesigner
MITSep 6, 2026 · metrics 2.10.0
npm
auth0/express-openid-connect
An Express.js middleware to protect OpenID Connect web applications.
MITSep 5, 2026 · metrics 2.10.0
npm
cm45t3r/candlestick
Candlestick patterns detection.
MITSep 5, 2026 · metrics 2.10.0
Maven
qtc-de/beanshooter
JMX enumeration and attacking tool.
GPL-3.0Sep 5, 2026 · metrics 2.10.0
crates.io
helsing-ai/sguaba
A Rust crate that provides hard-to-misuse rigid body transforms (aka "spatial math") for engineers with other things to worry about than linear algebra.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
increments/qiita-cli
Qiita CLI とは、手元の環境で記事の執筆・プレビュー・投稿ができるツールです。
Apache-2.0Sep 5, 2026 · metrics 2.10.0
PyPI · Go · npm
No licenseSep 5, 2026 · metrics 2.10.0
npm · PyPI
l4rm4nd/VoucherVault
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
GPL-3.0Sep 4, 2026 · metrics 2.10.0
npm
webdiscus/ansis
CJS/ESM ANSI color library for terminals, CI and Chromium-based browser consoles. Compatible with Bun, Deno, Next.JS.
ISCAug 31, 2026 · metrics 2.10.0
crates.io
rust-syndication/rss
Library for serializing the RSS web content syndication format
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go · npm
modiimedia/arri
Arri RPC is a code-first RPC framework for end-to-end type safety in any language
MITSep 5, 2026 · metrics 2.10.0
npm · RubyGems
railspulse-org/rails_pulse
Rails Pulse is a comprehensive performance monitoring and debugging gem that provides insights into your Rails application's health.
MITSep 3, 2026 · metrics 2.10.0
npm
d3/d3-interpolate
Interpolate numbers, colors, strings, arrays, objects, whatever!
ISCAug 31, 2026 · metrics 2.10.0
npm
rexxars/eventsource-parser
Streaming, source-agnostic EventSource/Server-Sent Events parser
MITAug 31, 2026 · metrics 2.10.0
crates.io
Synphonyte/leptos-use
Collection of essential Leptos utilities inspired by React-Use / VueUse
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Maven
flamingock/flamingock-java
Flamingock brings Change-as-Code (CaC) to your entire stack. It applies versioned, auditable changes to the external systems your application depends on — such as schemas, message brokers, databases, APIs, cloud services, and any other external system your application needs.
Apache-2.0Sep 7, 2026 · metrics 2.10.0
Go
leptonai/gpud
GPUd automates monitoring, diagnostics, and issue identification for GPUs
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
codaxy/cxjs
CxJS - Advanced JavaScript UI framework for admin and dashboard applications with ready to use grid, form and chart components.
MITSep 5, 2026 · metrics 2.10.0
—
qqqlab/madflight
Flight Controller for ESP32 / Raspberry Pico / STM32
MITSep 5, 2026 · metrics 2.10.0
npm
aws-solutions/quota-monitor-for-aws
This solution leverages AWS Trusted Advisor and Service Quotas to monitor AWS resource usage and raise alerts.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Packagist
nette/tester
Tester: enjoyable unit testing in PHP with code coverage reporter. 🍏🍏🍎🍏
Custom licenseSep 5, 2026 · metrics 2.10.0
crates.io
fortanix/rust-sgx
The Fortanix Rust Enclave Development Platform
MPL-2.0Sep 4, 2026 · metrics 2.10.0