Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,254
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
399B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
CitizensFoundation/your-priorities-app
Your Priorities is a citizen engagement platform, a progressive web app, and a participatory social network that empowers groups of any size to speak with one voice and organize around ideas.
MITAug 5, 2026 · metrics 2.5.0
PyPI
FEniCS/basix
FEniCSx finite element basis evaluation library
MITJul 26, 2026 · metrics 2.5.0
PyPI
OpenRouterTeam/python-sdk
No repository description published.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
RedHat-UX/red-hat-design-system
Red Hat's Design System
MITJul 14, 2026 · metrics 2.5.0
—
STMicroelectronics/cmsis-device-f4
Provides the STM32Cube MCU Component "cmsis_device_f4" of the STM32F4 series.
Apache-2.0Jul 22, 2026 · metrics 2.5.0
PyPI
ShuShuzinhuu/SpotiFLAC-Module-Version
Python Module of Spotiflac. Get Spotify tracks in true FLAC from Tidal, Qobuz, Amazon Music & Deezer — no account required.
MITJul 15, 2026 · metrics 2.5.0
—
VahidN/DNTCommon.Web.Core
DNTCommon.Web.Core provides common scenarios' solutions for ASP.NET Core applications.
Apache-2.0Jul 20, 2026 · metrics 2.5.0
—
XiaoMi/rdsn
Has been migrated to https://github.com/apache/incubator-pegasus/tree/master/rdsn
Custom licenseJul 19, 2026 · metrics 2.5.0
npm
actions/attest
Action for generating attestations for workflow artifacts
MITJul 22, 2026 · metrics 2.5.0
crates.io
andrewhickman/prost-reflect
A protobuf library extending prost with reflection support and dynamic messages.
Apache-2.0Jul 14, 2026 · metrics 2.5.0
PyPI
ansible-collections/cisco.nxos
Ansible Network Collection for Cisco NXOS
GPL-3.0Jul 21, 2026 · metrics 2.5.0
—
ansible-community/ansible-build-data
Holds generated but persistent results from building the Ansible community package
GPL-3.0Jul 18, 2026 · metrics 2.5.0
PyPI
capn-freako/PyBERT
Serial communication link bit error rate tester simulator, written in Python.
BSD-3-ClauseJul 15, 2026 · metrics 2.5.0
npm
cipherstash/stack
Searchable, application-level encryption for building privacy-first apps
MITJul 15, 2026 · metrics 2.5.0
PyPI
containerbuildsystem/dockerfile-parse
Python library for parsing Dockerfile files.
BSD-3-ClauseJul 18, 2026 · metrics 2.5.0
crates.io
denoland/sui
Embed custom RO data into precompiled executables
MITJul 23, 2026 · metrics 2.5.0
npm · PyPI
discord-userdoccers/discord-protos
Reverse-engineering Discord's user settings (and other!) protobufs
MITJul 23, 2026 · metrics 2.5.0
Hex
gordalina/hush
Hush is a runtime configuration loader for Elixir applications
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
intuit/oauth-jsclient
Intuit's NodeJS OAuth client provides a set of methods to make it easier to work with OAuth2.0 and Open ID
Apache-2.0Jul 19, 2026 · metrics 2.5.0
PyPI · npm
jaywhj/mkdocs-materialx
MaterialX, the next generation of mkdocs-material
MITJul 21, 2026 · metrics 2.5.0
npm
jhipster/generator-jhipster-entity-audit
JHipster module to enable entity audit and audit log page
Apache-2.0Jul 23, 2026 · metrics 2.5.0
npm
laurens94/vue-timeline-chart
A timeline component for Vue3
MITAug 4, 2026 · metrics 2.5.0
PyPI
marshmallow-code/marshmallow-oneofschema
marshmallow library extension that allows schema (de)multiplexing
MITJul 21, 2026 · metrics 2.5.0
PyPI
pymc-devs/pymc-extras
Powerful add-ons for PyMC
Custom licenseJul 20, 2026 · metrics 2.5.0
PyPI
pymovements/pymovements
A python package for processing eye movement data
MITJul 20, 2026 · metrics 2.5.0
npm
receter/my-component-library
No repository description published.
MITAug 1, 2026 · metrics 2.5.0
—
ropensci/openalexR
Getting bibliographic records from OpenAlex
Custom licenseJul 20, 2026 · metrics 2.5.0
RubyGems
sstephenson/ruby-ejs
EJS (Embedded JavaScript) template compiler for Ruby
MITJul 20, 2026 · metrics 2.5.0
Maven · npm
vert-x3/vertx-redis-client
Redis client for Vert.x
Apache-2.0Jul 25, 2026 · metrics 2.5.0
npm
zeh/prando
Deterministic pseudo-random number generator for JavaScript and TypeScript
MITJul 17, 2026 · metrics 2.5.0