Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
84,462
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · RubyGems
sleuth-io/sx
Skill sharing made easy
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
rsc/qr
QR codes
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
npm
abuiles/ember-watson
An Ember.js codemod to make upgrades automatic.
MITSep 25, 2026 · metrics 2.10.0
npm
brianc/node-pg-types
Type parsing for node-postgres
No licenseSep 23, 2026 · metrics 2.10.0
PyPI
hud-evals/hud-python
RL environments + evals for AI agents. Define once, train anything.
MITSep 20, 2026 · metrics 2.10.0
Go
grafana/xk6
k6 extension development toolbox
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
SocketCluster/socketcluster-client
JavaScript client for SocketCluster
MITSep 20, 2026 · metrics 2.10.0
npm · Maven · RubyGems
kadiraydinli/react-native-system-navigation-bar
Android system bars and iOS home indicator for React Native.
MITSep 26, 2026 · metrics 2.10.0
Go
sigcn/pg
Another p2p network library in Go 🌍
GPL-3.0Sep 24, 2026 · metrics 2.10.0
Go
tree-sitter/go-tree-sitter
Go bindings for tree-sitter
MITSep 23, 2026 · metrics 2.10.0
Go
dchest/siphash
Go implementation of SipHash-2-4, a fast short-input PRF created by Jean-Philippe Aumasson and Daniel J. Bernstein.
CC0-1.0Sep 23, 2026 · metrics 2.10.0
Go · npm
multiformats/go-multiaddr
Composable and future-proof network addresses
MITSep 23, 2026 · metrics 2.10.0
npm
kenchris/urlpattern-polyfill
URLPattern polyfill
MITSep 23, 2026 · metrics 2.10.0
npm
DTStack/monaco-sql-languages
SQL languages for monaco-editor
MITSep 26, 2026 · metrics 2.10.0
crates.io
NiklasEi/bevy_common_assets
Collection of generic asset loaders for common file formats
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
kubernetes-sigs/cloud-provider-azure
Cloud provider for Azure
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
tarasko/picows
Ultra-fast websocket client and server for asyncio
MITSep 20, 2026 · metrics 2.10.0
Maven
trivago/cluecumber
Clear and concise reporting for the Cucumber BDD and Karate JSON result format.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
tivac/modular-css
CSS Modules, but better and usable via Rollup, Vite, Webpack, CLI, PostCSS, or JS API
MITSep 20, 2026 · metrics 2.10.0
npm · PyPI · RubyGems
MarkUsProject/Markus
Git repository of MarkUs
MITSep 20, 2026 · metrics 2.10.0
npm
mitre/heimdall2
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
Custom licenseSep 26, 2026 · metrics 2.10.0
npm
ajv-validator/ajv-errors
Custom error messages in JSON Schemas for Ajv validator
MITSep 23, 2026 · metrics 2.10.0
npm
rveciana/svg-path-properties
Pure Javascript alternative to path.getPointAtLength(t) and getTotalLength() functions. Works with Canvas & Node
MITSep 23, 2026 · metrics 2.10.0
npm
ant-design/cssinjs
No repository description published.
MITSep 25, 2026 · metrics 2.10.0
PyPI
VectorDB-NTU/RaBitQ-Library
An official lightweight library for the RaBitQ algorithm and its applications in vector search.
Apache-2.0Sep 26, 2026 · metrics 2.10.0
npm
magidoc-org/magidoc
Autogenerate static GraphQL API documentation
MITSep 20, 2026 · metrics 2.10.0
PyPI
jeff-nasseri/mikrotik-mcp
MCP server for Mikrotik
MITSep 25, 2026 · metrics 2.10.0
RubyGems
saml-idp/saml_idp
Ruby SAML Identity Provider, best used with Rails (though not required)
MITSep 20, 2026 · metrics 2.10.0
npm
Gozala/querystring
Node's querystring module for all engines.
MITSep 23, 2026 · metrics 2.10.0
npm
RIAEvangelist/node-cmd
Command-line power for JavaScript: shell commands, direct executable calls, and child-process control with zero runtime dependencies.
MITSep 24, 2026 · metrics 2.10.0