Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,133
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
RubyGems
activemerchant/payment_icons
An easy to use library that allows you to manage and access payment icons
MITSep 17, 2026 · metrics 2.10.0
crates.io
contain-rs/linked-hash-map
A HashMap wrapper that holds key-value pairs in insertion order
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
mathiask88/node-snap7
node.js wrapper for snap7
MITSep 16, 2026 · metrics 2.10.0
Packagist
medz/id-card-of-china
🆔一个基于「公民身份号码」规则获取身份证号码中包含的基础信息组件（PHP）
MITSep 19, 2026 · metrics 2.10.0
—
qiniu/csharp-sdk
Qiniu Resource (Cloud) Storage SDK for C#
MITSep 19, 2026 · metrics 2.10.0
npm
release-it/conventional-changelog
Conventional changelog plugin for release-it
MITSep 17, 2026 · metrics 2.10.0
Packagist
spatie/php-structure-discoverer
Automatically discover classes within your PHP application
MITSep 16, 2026 · metrics 2.10.0
—
arnetheduck/nim-results
Friendly value-or-error type
Custom licenseSep 18, 2026 · metrics 2.10.0
RubyGems
hanami/hanami-view
Views, templates and presenters for Ruby web applications
MITSep 18, 2026 · metrics 2.10.0
npm · Go
iswalle/getnote-cli
Get笔记 CLI — 让人类和 AI Agent 都能在终端操作 Get笔记
MITSep 19, 2026 · metrics 2.10.0
npm
kevinbeaty/any-promise
NOTE: You probably want native promises now
MITSep 16, 2026 · metrics 2.10.0
npm
kurrent-io/KurrentDB-Client-NodeJS
KurrentDB NodeJS Client
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
nanoporetech/pod5-file-format
Pod5: a high performance file format for nanopore reads.
Custom licenseSep 21, 2026 · metrics 2.10.0
—
notaryproject/specifications
Cross tooling and interoperability specifications
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
nrfconnect/sdk-nrfxlib
Nordic common libraries
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
rudderlabs/rudder-sdk-js
JavaScript SDK for RudderStack - the Customer Data Platform for Developers.
MITSep 18, 2026 · metrics 2.10.0
npm
sindresorhus/npm-name
Check whether a package or organization name is available on npm
MITSep 18, 2026 · metrics 2.10.0
PyPI
smn2gnt/MCP-Salesforce
MCP Salesforce connector
MITSep 20, 2026 · metrics 2.10.0
npm
unjs/capnp-es
🔥 TypeScript implementation of the Cap'n Proto serialization.
Custom licenseSep 18, 2026 · metrics 2.10.0
Packagist
ActiveCampaign/postmark-php
The official PHP library for Postmark.
MITSep 17, 2026 · metrics 2.10.0
PyPI
Gurobi/gurobi-optimods
Data-driven APIs for common optimization tasks
Apache-2.0Sep 21, 2026 · metrics 2.10.0
PyPI
KhronosGroup/Vulkan-Profiles
Vulkan Profiles Tools
Custom licenseSep 19, 2026 · metrics 2.10.0
NuGet
adospace/CoreSync
CoreSync is a .NET library that provides data synchronization between databases
MITSep 18, 2026 · metrics 2.10.0
crates.io
andrewhickman/fs-err
A simple wrapper around filesystem operations to provide more helpful error messages.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
image-rs/image-gif
GIF en- and decoder
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
koolreport/core
An Open Source PHP Reporting Framework that helps you to write perfect data reports or to construct awesome dashboards in PHP. Working great with all PHP versions from 5.6 to latest 8.0. Fully compatible with all kinds of MVC frameworks like Laravel, CodeIgniter, Symfony.
MITSep 17, 2026 · metrics 2.10.0
npm
mathiasbynens/cssesc
A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.
MITSep 16, 2026 · metrics 2.10.0
Go · npm
nicholas-fedor/shoutrrr
A notification library for gophers and their furry friends.
MITSep 16, 2026 · metrics 2.10.0
npm
sindresorhus/read-pkg
Read a package.json file
MITSep 16, 2026 · metrics 2.10.0
—
status-im/nim-chronicles
A crafty implementation of structured logging for Nim.
Apache-2.0Sep 18, 2026 · metrics 2.10.0