Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,571
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
q5js/q5.js
Beginner friendly graphics powered by WebGPU, optimized for interactive art!
LGPL-3.0Sep 25, 2026 · metrics 2.10.0
npm
paulmillr/noble-ciphers
Audited & minimal JS implementation of Salsa20, ChaCha and AES
MITSep 23, 2026 · metrics 2.10.0
npm
heineiuo/isomorphic-ws
Isomorphic implementation of WebSocket (https://www.npmjs.com/package/ws)
MITSep 23, 2026 · metrics 2.10.0
—
nu7hatch/gouuid
Go binding for libuuid
MITSep 23, 2026 · metrics 2.10.0
PyPI
geldata/gel-python
The official Python client library for Gel
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
J535D165/pyalex
A Python library for OpenAlex (openalex.org)
MITSep 20, 2026 · metrics 2.10.0
npm
allure-framework/allure3
Allure Report is a flexible multi-language test report tool to show you a detailed representation of what has been tested and extract maximum from the everyday execution of tests
Apache-2.0Sep 27, 2026 · metrics 2.10.0
—
status-im/nim-chronos
Chronos - An efficient library for asynchronous programming
Apache-2.0Sep 25, 2026 · metrics 2.10.0
crates.io
zurawiki/tiktoken-rs
Ready-made tokenizer library for working with GPT and tiktoken
MITSep 26, 2026 · metrics 2.10.0
NuGet
totpero/DeviceDetector.NET
The Universal Device Detection library will parse any User Agent and detect the browser, operating system, device used (desktop, tablet, mobile, tv, cars, console, etc.), brand and model.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
holepunchto/hyperdht
The DHT powering Hyperswarm
MITSep 24, 2026 · metrics 2.10.0
RubyGems · npm
julianrubisch/attractor
code complexity metrics visualization and exploration tool for ruby and javascript
MITSep 20, 2026 · metrics 2.10.0
Packagist
s-ichikawa/laravel-sendgrid-driver
This library can add sendgrid driver into the laravel's mail configure.
MITSep 26, 2026 · metrics 2.10.0
Go
elastic/go-sysinfo
go-sysinfo is a library for collecting system information.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
hashicorp/hil
HIL is a small embedded language for string interpolations.
MPL-2.0Sep 23, 2026 · metrics 2.10.0
npm
speed-highlight/core
A tiny, fast, simple syntax highlighter for the web and the terminal in JavaScript
CC0-1.0Sep 23, 2026 · metrics 2.10.0
PyPI · npm
Lyellr88/marm-memory
Local-first 3-in-1 AI memory layer & MCP server for Claude Code, Codex, Grok, Gemini, VS Code and Cursor. Fuses session history, codebase indexing & concept graphs in SQLite. Enables zero-cloud, privacy-first context & instant recall, supports multi-agent swarms.
Apache-2.0Sep 24, 2026 · metrics 2.10.0
npm · crates.io
sqdshguy/wreq-js
HTTP client for Node.js with browser TLS fingerprint impersonation
MITSep 23, 2026 · metrics 2.10.0
Go
kunchenguid/gsh
A battery-included, POSIX-compatible, generative shell
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
mainsail-crew/crowsnest
Webcam Service for multiple Cams
GPL-3.0Sep 26, 2026 · metrics 2.10.0
npm
AugurProject/augur-ui
Augur UI
MITSep 23, 2026 · metrics 2.10.0
—
nagios-plugins/nagios-plugins
Nagios Plugins
GPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
stylelint/stylelint-config-recommended
The recommended shareable config for Stylelint
MITSep 23, 2026 · metrics 2.10.0
npm
Vonage/vonage-node-sdk
Vonage API client for Node.js. API support for SMS, Voice, Text-to-Speech, Numbers, Verify (2FA) and more.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
kriszyp/cbor-x
Ultra-fast CBOR encoder/decoder with extensions for records and structural cloning
MITSep 26, 2026 · metrics 2.10.0
Go
mdlayher/vsock
Package vsock provides access to Linux VM sockets (AF_VSOCK) for communication between a hypervisor and its virtual machines. MIT Licensed.
MITSep 23, 2026 · metrics 2.10.0
npm
DTStack/dt-sql-parser
SQL Parsers for BigData, built with antlr4.
MITSep 26, 2026 · metrics 2.10.0
npm · PyPI
TerriaJS/TerriaMap
Catalog-based web geospatial visualisation platform.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
bmresearch/Solnet
Solana's .NET SDK and integration library.
MITSep 20, 2026 · metrics 2.10.0
crates.io
jbaublitz/getset
Getters and Setters for Rust.
MITSep 23, 2026 · metrics 2.10.0