Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,378
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
appium/appium-chromedriver
Node.js wrapper around Chromedriver
Apache-2.0Jul 19, 2026 · metrics 2.5.0
PyPI
artursepp/optimalportfolios
Implementation of optimisation analytics for constructing and backtesting optimal portfolios in Python
MITJul 14, 2026 · metrics 2.5.0
crates.io
badboy/iso8601
Parsing ISO8601 dates using nom
MITJul 25, 2026 · metrics 2.5.0
—
basho/mochiweb
a branch of Mochi Media's excellent HTTP library -- their canonical source can be found at https://github.com/mochi/mochiweb
Custom licenseJul 22, 2026 · metrics 2.5.0
Go
brunomvsouza/ynab.go
Go client for the YNAB API. Unofficial. It covers 100% of the resources made available by the YNAB API.
BSD-2-ClauseJul 14, 2026 · metrics 2.5.0
PyPI
click-contrib/click-default-group
Extends click.Group to invoke a command without explicit subcommand name.
BSD-3-ClauseJul 18, 2026 · metrics 2.5.0
Go
colibri-project-io/colibri-sdk-go
Colibri SDK for Google Golang Stack
Apache-2.0Jul 16, 2026 · metrics 2.5.0
npm
commercetools/merchant-center-application-kit
Tools and components for developing Merchant Center Customizations 🛠
MITJul 15, 2026 · metrics 2.5.0
PyPI
cscorley/whatthepatch
What The Patch!? -- A Python patch parsing library
MITJul 21, 2026 · metrics 2.5.0
crates.io
devolutions/sspi-rs
A Rust implementation of the Security Support Provider Interface (SSPI) API
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
dotcore64/react-stay-scrolled
React component for keeping components scrolled down
MITJul 16, 2026 · metrics 2.5.0
NuGet
erri120/GameFinder
.NET library for finding games.
GPL-3.0Jul 24, 2026 · metrics 2.5.0
PyPI
fastapi/annotated-doc
Document parameters, class attributes, return types, and variables inline, with Annotated.
MITJul 16, 2026 · metrics 2.5.0
PyPI
ffroliva/gflow-cli
Unofficial CLI for Google Flow — drive Veo I2V from the terminal. For Ultra/Pro subscribers who want to use their Flow credits efficiently via batch automation instead of the web UI.
MITJul 17, 2026 · metrics 2.5.0
npm
fregante/webext-permission-toggle
Browser-action context menu to request permission for the current tab.
MITJul 14, 2026 · metrics 2.5.0
npm
germanbisurgi/jedison
A JavaScript Library that generates forms from JSON Schemas, to editing and validate JSON.
MITJul 16, 2026 · metrics 2.5.0
RubyGems
github-community-projects/graphql-client
A Ruby library for declaring, composing and executing GraphQL queries
MITJul 20, 2026 · metrics 2.5.0
—
gleam-lang/javascript
🌼 Extra code for when running on JavaScript
No licenseJul 17, 2026 · metrics 2.5.0
npm
guidepup/guidepup-playwright
Screen reader automation library for Playwright testing.
MITJul 30, 2026 · metrics 2.5.0
npm
harlan-zw/nuxt-site-config
Unifying site config with powerful and flexible APIs, for module authors and users.
MITJul 25, 2026 · metrics 2.5.0
crates.io
kennytm/rustup-toolchain-install-master
Install a rustc master toolchain usable from rustup
MITJul 29, 2026 · metrics 2.5.0
npm
klaviyo/klaviyo-api-node
Node sdk for the Klaviyo API
No licenseJul 19, 2026 · metrics 2.5.0
Go
leandroveronezi/go-recognizer
Face detection and recognition using golang
MITJul 30, 2026 · metrics 2.5.0
Go
linode/linode-blockstorage-csi-driver
Container Storage Interface (CSI) Driver for Linode Block Storage
Apache-2.0Jul 22, 2026 · metrics 2.5.0
Packagist · npm
luigel/laravel-paymongo
A laravel wrapper for Paymongo API
MITAug 4, 2026 · metrics 2.5.0
Packagist
mageplaza/module-core
Mageplaza Core module for Magento 2. All Mageplaza modules requires this module.
Custom licenseAug 5, 2026 · metrics 2.5.0
npm
marimo-team/codemirror-mcp
CodeMirror extension to hook up a Model Context Provider (MCP)
Apache-2.0Aug 2, 2026 · metrics 2.5.0
Go
mimicode/tksdk
淘客sdk 包含 京东 、苏宁、唯品会、拼多多、淘宝、阿里生活
Apache-2.0Jul 25, 2026 · metrics 2.5.0
RubyGems
miyagawa/faraday-cookie_jar
Client-side cookie management for Faraday
MITJul 20, 2026 · metrics 2.5.0
Go
morningconsult/docker-credential-vault-login
Automatically gets docker credentials from Hashicorp Vault
Apache-2.0Jul 19, 2026 · metrics 2.5.0