Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
55,073
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
407B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
crates.io
bytecodealliance/wstd
A WebAssembly-native Rust stdlib
Apache-2.0Jul 23, 2026 · metrics 2.5.0
PyPI
celery/vine
Python promises
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
chaijs/type-detect
Improved typeof detection for node.js and the browser.
MITAug 4, 2026 · metrics 2.5.0
PyPI
choupit0/MassVulScan
A fast network scanning tool to detect open ports and security vulnerabilities (Compatible with Debian & Red Hat OS)
GPL-3.0Aug 4, 2026 · metrics 2.5.0
PyPI
data-apis/array-api-compat
Compatibility layer for common array libraries to support the Array API
MITJul 21, 2026 · metrics 2.5.0
—
dlidstrom/Duplo
Duplicates finder for various source code formats.
GPL-2.0Jul 22, 2026 · metrics 2.5.0
RubyGems
dryruby/ebnf
EBNF parser and generic parser generator for Ruby.
UnlicenseJul 28, 2026 · metrics 2.5.0
npm
extractus/oembed-extractor
Extract oEmbed data from given webpage
MITJul 31, 2026 · metrics 2.5.0
npm
gotgenes/pi-anthropic-auth
Pi extension package for Anthropic OAuth compatibility
MITJul 30, 2026 · metrics 2.5.0
npm
harlan-zw/nuxt-seo-utils
SEO utilities to improve your Nuxt sites discoverability and shareability.
MITJul 25, 2026 · metrics 2.5.0
npm
josephg/node-foundationdb
Modern Node.js FoundationDB bindings
Custom licenseJul 17, 2026 · metrics 2.5.0
RubyGems
ktheory/dalli-elasticache
A wrapper for Dalli with support for AWS ElastiCache
MITAug 9, 2026 · metrics 2.5.0
npm
lhncbc/lforms
See the project website at http://lhncbc.github.io/lforms/, or view the demo website at https://lhcforms.nlm.nih.gov/lhcforms.
Custom licenseJul 15, 2026 · metrics 2.5.0
PyPI
mitchelllisle/sparkdantic
✨ A Pydantic to PySpark schema library
MITJul 18, 2026 · metrics 2.5.0
npm
oxgeneral/ORCH
One CLI to orchestrate them all. Manage a team of AI agents executing tasks in parallel from your terminal using a command line interface to manage them all. Manage a team of artificial intelligence agents who perform tasks in parallel from your terminal or offline on a local or server
MITAug 3, 2026 · metrics 2.5.0
Packagist
phptg/bot-api
PHP library to interact with Telegram Bot API
BSD-3-ClauseJul 20, 2026 · metrics 2.5.0
PyPI
pypa/pyproject-hooks
A low-level library for calling build-backends in `pyproject.toml`-based project
MITJul 21, 2026 · metrics 2.5.0
Packagist
statamic/eloquent-driver
Provides support for storing your Statamic data in a database, rather than flat files.
MITJul 30, 2026 · metrics 2.5.0
crates.io · npm
0xMiden/protocol
Core components of the Miden protocol
MITJul 26, 2026 · metrics 2.5.0
—
Macross-Software/core
Core repository contains the primary open source libraries released by Macross Software for .NET Core.
MITAug 4, 2026 · metrics 2.5.0
—
PacificBiosciences/ccs
CCS: Generate Highly Accurate Single-Molecule Consensus Reads (HiFi Reads)
BSD-3-Clause-ClearJul 26, 2026 · metrics 2.5.0
npm
SBoudrias/mem-fs
Simple in-memory vinyl file store.
MITJul 17, 2026 · metrics 2.5.0
—
SciML/PreallocationTools.jl
Tools for building non-allocating pre-cached functions in Julia, allowing for GC-free usage of automatic differentiation in complex codes
Custom licenseJul 17, 2026 · metrics 2.5.0
Go · npm
TecharoHQ/yeet
For when shell scripts aren't enough but a full program is too much. Yeet that script out!
MITJul 27, 2026 · metrics 2.5.0
npm
UiPath/skills
This is a repository of skills for interfacing UiPath capabilities to external developers.
MITJul 18, 2026 · metrics 2.5.0
crates.io
atuinsh/eye-declare
A declarative inline TUI rendering library for Rust, built on Ratatui
No licenseJul 21, 2026 · metrics 2.5.0
Go
autobrr/upbrr
No repository description published.
GPL-2.0Jul 15, 2026 · metrics 2.5.0
npm · Packagist
automattic/social-logos
[READ ONLY] A repository of all the social logos we use on WordPress.com. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
bluejava/zousan
A Lightning Fast, Yet Very Small Promise A+ Compliant Implementation
MITJul 16, 2026 · metrics 2.5.0
npm
chrisguttandin/angular-prerender
A command line tool to prerender Angular Apps.
MITJul 17, 2026 · metrics 2.5.0