Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,133
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
BigDataBiology/SemiBin
SemiBin: metagenomics binning with self-supervised deep learning
MITSep 17, 2026 · metrics 2.10.0
Packagist
craue/CraueConfigBundle
Database-stored settings made available via a service for your Symfony project.
MITSep 18, 2026 · metrics 2.10.0
Packagist
gdebrauwer/laravel-hateoas
Expose the authorization logic of your REST API using HATEOAS links
MITSep 17, 2026 · metrics 2.10.0
Packagist
joshcirre/instruckt-laravel
A visual feedback tool for your agentic Laravel workflow.
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
open-dingtalk/dingtalk-stream-sdk-python
Python SDK for DingTalk Stream Mode API, Compared with the webhook mode, it is easier to access the DingTalk chatbot
MITSep 17, 2026 · metrics 2.10.0
PyPI
pyudev/pyudev
Python bindings to libudev (with support for PyQt4, PySide, pygobject and wx)
LGPL-2.1Sep 17, 2026 · metrics 2.10.0
Go
viamrobotics/rdk
Viam Server - Robotic Development Kit
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
xPaw/SteamID.php
🆔 PHP library to work with SteamIDs
MITSep 21, 2026 · metrics 2.10.0
PyPI · npm
LibraryOfCongress/concordia
Crowdsourcing platform for full text transcription and tagging. https://crowd.loc.gov
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io
RoaringBitmap/croaring-rs
Rust FFI wrapper for CRoaring
Apache-2.0Sep 21, 2026 · metrics 2.10.0
PyPI
chtd/psycopg2cffi
Port to cffi with some speed improvements
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
jawira/case-converter
Convert strings between 13 naming conventions: Snake case, Camel case, Kebab case, Pascal case, Ada case, Train case, Cobol case, Macro case, Upper case, Lower case, Title case, Sentence case and Dot notation.
MITSep 18, 2026 · metrics 2.10.0
—
leahneukirchen/xtools
a few helpers for working with XBPS
No licenseSep 19, 2026 · metrics 2.10.0
Go
puzed/wrapguard
Userspace WireGuard proxy for transparent network tunneling
MITSep 19, 2026 · metrics 2.10.0
npm
uni-ku/root
🦾 解决 UniApp 无法使用根部组件问题
MITSep 17, 2026 · metrics 2.10.0
Go
Antonboom/testifylint
The Golang linter that checks usage of github.com/stretchr/testify.
MITSep 16, 2026 · metrics 2.10.0
—
KejPi/AbracaDABra
Abraca DAB radio: DAB/DAB+ Software Defined Radio (SDR)
MITSep 16, 2026 · metrics 2.10.0
npm
alloc/drizzle-plus
A collection of useful utilities and extensions for Drizzle ORM
MITSep 22, 2026 · metrics 2.10.0
Go
charmbracelet/keygen
An SSH key pair generator 🗝️
MITSep 20, 2026 · metrics 2.10.0
—
device-management-toolkit/deployment
Device Management Toolkit offers open-source microservices, applications and libraries to streamline Intel AMT integration, simplifying out-of-band management solutions for Intel vPro Platforms.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
hyperium/http-body
Asynchronous HTTP body trait
MITSep 16, 2026 · metrics 2.10.0
crates.io
jannistpl/egui-file-dialog
Full featured and customizable file dialog for egui
MITSep 18, 2026 · metrics 2.10.0
npm · crates.io
kunkunsh/kkrpc
A TypeScript RPC protocol for multiple environments (iframe, web worker, stdio, http, WebSocket)
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
leekelleher/umbraco-contentment
Contentment for Umbraco - a state of happiness and satisfaction
MITSep 18, 2026 · metrics 2.10.0
PyPI
mapnik/python-mapnik
Python bindings for mapnik
LGPL-2.1Sep 19, 2026 · metrics 2.10.0
npm
micromatch/to-regex-range
Pass two numbers, get a regex-compatible source string for matching ranges. Fast compiler, optimized regex, and validated against more than 2.78 million test assertions. Useful for creating regular expressions to validate numbers, ranges, years, etc.
MITSep 16, 2026 · metrics 2.10.0
crates.io
petgraph/fixedbitset
A simple bitset container for Rust
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
rust-embedded/critical-section
Pluggable critical section
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
tilo/validates_overlap
Adds ActiveRecord validations that prevent overlapping datetime and other linearly ordered ranges — bookings, reservations, meetings, shifts. One SQL query; supports scoping and open-ended ranges. Supports Rails 6.1–8.1
MITSep 17, 2026 · metrics 2.10.0
crates.io
tod-org/tod
An unofficial Todoist command line client written in Rust
MITSep 16, 2026 · metrics 2.10.0