Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
54,264
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
404B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
Packagist
fab2s/YaEtl
Yet Another ETL in PHP
MITJul 31, 2026 · metrics 2.5.0
PyPI
faust-streaming/cChardet
universal character encoding detector
Custom licenseJul 29, 2026 · metrics 2.5.0
crates.io
ferrilab/ferrilab
Experimenting with Rust's fundamental data model
MITAug 8, 2026 · metrics 2.5.0
crates.io
gettext-rs/gettext-rs
GNU Gettext FFI binding for Rust
No licenseAug 6, 2026 · metrics 2.5.0
Maven · npm
gravitee-io/gravitee-access-management
Gravitee.io - Access Management - OpenSource IAM Solution
Apache-2.0Jul 24, 2026 · metrics 2.5.0
Go · npm
grtsinry43/grtblog
不仅是博客，也是全新的内容基础设施。由 SvelteKit 与 Go 驱动，静态先行、实时交互的现代化博客系统
MITJul 27, 2026 · metrics 2.5.0
Go
hashicorp/packer-plugin-ansible
Packer plugin for Ansible Provisioner
MPL-2.0Jul 17, 2026 · metrics 2.5.0
npm
honeycombio/honeycomb-opentelemetry-web
Honeycomb’s OpenTelemetry Web SDK distribution
Apache-2.0Aug 2, 2026 · metrics 2.5.0
Packagist
illuminate/hashing
[READ ONLY] Subtree split of the Illuminate Hashing component (see laravel/framework)
MITJul 15, 2026 · metrics 2.5.0
PyPI
jtyr/kubeconform-helm
Tools to test Helm chats with "kubeconform".
MITJul 22, 2026 · metrics 2.5.0
RubyGems
kramdown/parser-gfm
kramdown-parser-gfm provides a kramdown parser for the GFM dialect of Markdown
Custom licenseJul 16, 2026 · metrics 2.5.0
Packagist
laravel/head
Head and metadata management for Laravel applications
MITAug 3, 2026 · metrics 2.5.0
—
lpil/jot
A parser for Djot, a markdown-like language.
No licenseJul 19, 2026 · metrics 2.5.0
Hex
lud/oaskit
A fully featured OpenAPI Request validator for Elixir Plug applications
Apache-2.0Jul 17, 2026 · metrics 2.5.0
—
m15a/flake-awesome-neovim-plugins
A Nix flake providing the Awesome Neovim plugins
BSD-3-ClauseJul 27, 2026 · metrics 2.5.0
PyPI
matze/pkgconfig
A Python interface to the pkg-config command line tool
MITJul 21, 2026 · metrics 2.5.0
—
mirage/functoria
A DSL to invoke otherworldly functors
ISCJul 19, 2026 · metrics 2.5.0
PyPI
necaris/cuid.py
A fast, scalable unique ID generator for Python
BSD-2-ClauseAug 8, 2026 · metrics 2.5.0
RubyGems
opal/opal-rspec
Opal + RSpec = ♥️
No licenseJul 20, 2026 · metrics 2.5.0
npm
penclipai/paperclip-cn
Open-source orchestration for zero-human companies
MITJul 23, 2026 · metrics 2.5.0
crates.io
philsippl/circom-witness-rs
No repository description published.
MITAug 8, 2026 · metrics 2.5.0
—
pkgxdev/libpkgx
`import`… but with pkging powers
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Hex
pkinney/distance
Elixir library for various distance calculations
MITJul 17, 2026 · metrics 2.5.0
npm
privatenumber/resolve-pkg-maps
Resolve package.json `exports` & `imports` maps
MITAug 4, 2026 · metrics 2.5.0
PyPI
pyupio/dparse
A parser for Python dependency files
MITJul 21, 2026 · metrics 2.5.0
Hex
redink/extrace
Elixir wrapper for Recon Trace.
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
rogie/figui3
A lightweight, customizable web component library that uses Figmas UI3 style for modern web applications, but specifically for Figma plugins.
MITJul 14, 2026 · metrics 2.5.0
crates.io
rust-embedded/aarch32
Low level access to ARM Aarch32 (Cortex-R and Cortex-A) processors
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Packagist · npm
silverstripe/silverstripe-subsites
Subsites module for Silverstripe CMS
BSD-3-ClauseJul 22, 2026 · metrics 2.5.0
npm
sindresorhus/eslint-package-json
Powerful ESLint rules for package.json
MITAug 6, 2026 · metrics 2.5.0