Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,584
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
PyPI
jeremykawahara/derm7pt
Dermatology dataset composed of a diagnosis and seven-point checklist criteria labels
Custom licenseJul 15, 2026 · metrics 2.5.0
PyPI
jztan/pdf-mcp
An MCP server that lets Claude Code and other AI agents work through large PDFs without overflowing their context — search by meaning or keyword, read only the pages that matter, and cleanly pull out tables, images, and scanned text, even from multi-column and Japanese layouts.
MITAug 1, 2026 · metrics 2.5.0
npm
launchdarkly/react-client-sdk
LaunchDarkly Client-side SDK for React.js
Custom licenseJul 29, 2026 · metrics 2.5.0
npm
leboncoin/spark-web
✨ Simple, Modular & Accessible UI Components for your React Applications
MITJul 13, 2026 · metrics 2.5.0
Maven
libretro/mame
MAME - Multiple Arcade Machine Emulator
Custom licenseJul 31, 2026 · metrics 2.5.0
Packagist
longitude-one/doctrine-spatial
Doctrine extension to persist spatial data objects.
MITJul 13, 2026 · metrics 2.5.0
Packagist
mailersend/mailersend-laravel-driver
The official MailerSend Laravel Driver
MITJul 21, 2026 · metrics 2.5.0
npm
malloydata/publisher
Publisher is the open-source semantic model server for the Malloy data language. It lets you define semantic models once — and use them everywhere.
MITJul 19, 2026 · metrics 2.5.0
Go · PyPI
nttcom/pola
Stateful PCE Implementation and PCEP Library in Go
MITJul 27, 2026 · metrics 2.5.0
npm
optimizely/react-sdk
React SDK for Optimizely Feature Experimentation and Optimizely Full Stack (legacy).
Apache-2.0Jul 21, 2026 · metrics 2.5.0
Go
pbs-plus/pbs-plus
A Proxmox Backup Server (PBS) "extension" server that aims to add features and make PBS a true alternative to Veeam.
MITJul 17, 2026 · metrics 2.5.0
Packagist
php-http/guzzle7-adapter
Guzzle 7 adapter
MITJul 22, 2026 · metrics 2.5.0
RubyGems
piotrmurach/tty-screen
Terminal screen detection - cross platform, major ruby interpreters
MITJul 20, 2026 · metrics 2.5.0
PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MITJul 18, 2026 · metrics 2.5.0
PyPI
rmovva/HypotheSAEs
HypotheSAEs: hypothesizing interpretable relationships in text datasets using sparse autoencoders. https://arxiv.org/abs/2502.04382
Apache-2.0Jul 27, 2026 · metrics 2.5.0
PyPI
rosscdh/mkdocs-markdownextradata-plugin
A MkDocs plugin that injects the mkdocs.yml extra variables into the markdown template
MITJul 30, 2026 · metrics 2.5.0
Packagist
rowanhill/wiremock-php
PHP API for WireMock JSON interface
MITJul 27, 2026 · metrics 2.5.0
RubyGems
ruby/matrix
An implementation of Matrix and Vector classes
Custom licenseJul 17, 2026 · metrics 2.5.0
Go
ryanrolds/sqlclosecheck
Linter that confirms DB rows and statements are closed properly.
MITAug 4, 2026 · metrics 2.5.0
PyPI
scrapy/protego
A pure-Python robots.txt parser with support for modern conventions.
BSD-3-ClauseAug 8, 2026 · metrics 2.5.0
npm
sentioxyz/sentio-sdk
No repository description published.
Apache-2.0Jul 15, 2026 · metrics 2.5.0
Go
sentriz/go-taglib
portable Go audio metadata read/write via TagLib compiled to Wasm
LGPL-2.1Jul 24, 2026 · metrics 2.5.0
Packagist · PyPI
sonata-project/SonataClassificationBundle
Symfony SonataClassificationBundle
MITAug 3, 2026 · metrics 2.5.0
PyPI
sphinx-doc/sphinxext-opengraph
Sphinx extension to generate unique OpenGraph metadata
BSD-3-ClauseJul 17, 2026 · metrics 2.5.0
crates.io
strawlab/adskalman-rs
Kalman filter implementation in Rust
Apache-2.0Aug 8, 2026 · metrics 2.5.0
—
vszakats/harbour-core
Harbour fork (from https://github.com/harbour/core) + updates & fixes = 3.4
Custom licenseJul 17, 2026 · metrics 2.5.0
npm
w3c/specberus
Checker used at W3C to validate the compliance of Technical Reports with publication rules
MITJul 25, 2026 · metrics 2.5.0
npm · RubyGems
x-govuk/govuk-form-builder
A form builder for Ruby on Rails that’s compatible with the GOV.UK Design System.
MITJul 13, 2026 · metrics 2.5.0
Go
yeya24/promlinter
No repository description published.
Apache-2.0Aug 4, 2026 · metrics 2.5.0
npm
Create-Node-App/create-node-app
Powerful tool to scaffold your application choosing between different templates and extensions for Web apps, Web Extensions, Monorepos, and more!
MITJul 20, 2026 · metrics 2.5.0