Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,483
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
RubyGems
kufu/kiji
e-Gov 外部連携API 連携 gem
MITJul 21, 2026 · metrics 2.5.0
PyPI
kvas-it/pytest-console-scripts
Pytest plugin for testing console scripts
MITJul 28, 2026 · metrics 2.5.0
Packagist
laravel/surveyor
Laravel Surveyor is a powerful (mostly) static analysis tool designed to extract detailed PHP and Laravel-specific information from your code.
No licenseJul 16, 2026 · metrics 2.5.0
Hex
membraneframework/unifex
Tool for generating interfaces between native C code and Elixir
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Maven
microsoft/hermes-windows
Hermes is a small and lightweight JavaScript engine optimized for running React Native apps..
MITJul 17, 2026 · metrics 2.5.0
PyPI
miguelgrinberg/simple-websocket
Simple WebSocket server and client for Python.
MITJul 18, 2026 · metrics 2.5.0
npm · crates.io
olo-dot-io/uni-cli
Operations substrate for AI agents that use real software: 311 sites/tools, logged-in browsers, desktop apps, local tools, MCP, policy, evidence, AgentEnvelope v2, and self-repair.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go
omeid/conex
Conex integrates Docker with testing package so you can easily run your integration tests with containers.
MITJul 19, 2026 · metrics 2.5.0
npm · PyPI
openai/openai-guardrails-js
OpenAI Guardrails - TypeScript / JavaScript
MITJul 23, 2026 · metrics 2.5.0
crates.io
paddor/zrip
Fast, memory-safe Rust zstd codec with all-level decode, -8..4 encode, and dictionary training.
MITAug 2, 2026 · metrics 2.5.0
PyPI
pdm-project/pdm-backend
The build backend used by PDM that supports latest packaging standards.
MITJul 21, 2026 · metrics 2.5.0
Packagist
psalm/psalm-plugin-doctrine
Stubs to let Psalm understand Doctrine better
No licenseJul 26, 2026 · metrics 2.5.0
PyPI
rero/rero-ils
Integrated Library System flavour of Invenio by RERO+.
AGPL-3.0Jul 19, 2026 · metrics 2.5.0
RubyGems
rubocop/rubocop-md
RuboCop for Markdown code snippets
MITJul 17, 2026 · metrics 2.5.0
Hex
rusterlium/html5ever_elixir
NIF wrapper of html5ever using Rustler
Apache-2.0Jul 17, 2026 · metrics 2.5.0
PyPI
scverse/napari-spatialdata
Interactive visualization of spatial omics data
BSD-3-ClauseJul 26, 2026 · metrics 2.5.0
—
sebastienros/shortcodes
Shortcodes processor for .NET
MITJul 18, 2026 · metrics 2.5.0
Packagist · npm
silverstripe/silverstripe-gridfield-bulk-editing-tools
Silverstripe CMS GridField components for bulk upload and bulk record edit, unlink & delete :package::boom:
BSD-3-ClauseJul 22, 2026 · metrics 2.5.0
npm
slevithan/emoji-regex-xs
A regular expression to match all emoji-only symbols
MITJul 17, 2026 · metrics 2.5.0
npm
sxzz/obug
A lightweight JavaScript debugging utility, forked from debug, featuring TypeScript and ESM support.
MITAug 4, 2026 · metrics 2.5.0
npm
tata1mg/catalyst-core
No repository description published.
MITJul 18, 2026 · metrics 2.5.0
Packagist
thephpleague/flysystem-memory
Flysystem Memory Adapter
MITJul 30, 2026 · metrics 2.5.0
npm
twilio/flex-plugin-builder
Packages related to building a Twilio Flex Plugin
MITJul 20, 2026 · metrics 2.5.0
npm
unjs/impound
Builder-agnostic plugin to allow restricting import patterns in certain parts of your code-base.
MITAug 2, 2026 · metrics 2.5.0
npm
vivliostyle/vfm
⬇️ Open and extendable Markdown syntax and toolchain.
Custom licenseJul 17, 2026 · metrics 2.5.0
Maven
volcengine/volcengine-java-sdk
No repository description published.
Apache-2.0Jul 16, 2026 · metrics 2.5.0
PyPI
wntrblm/flask-talisman
HTTP security headers for Flask
Apache-2.0Jul 21, 2026 · metrics 2.5.0
PyPI
zigpy/zigpy-deconz
A library which communicates with Deconz radios for zigpy
GPL-3.0Jul 28, 2026 · metrics 2.5.0
PyPI
ApeWorX/eth-keyfile
Tools for handling the encrypted keyfile format used to store private keys.
MITJul 21, 2026 · metrics 2.5.0
Packagist · npm
Automattic/msm-sitemap
Comprehensive sitemaps for your WordPress VIP site. Joint collaboration between Metro.co.uk, WordPress VIP, Alley Interactive, Maker Media, 10up, and others.
GPL-2.0Jul 20, 2026 · metrics 2.5.0