Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
52,967
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
400B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm · Maven · RubyGems
LottieFiles/dotlottie-react-native
Official LottieFiles player for Lottie & dotLottie in React Native. Expo-ready, New Architecture support, iOS/Android/Web.
MITJul 27, 2026 · metrics 2.5.0
npm
Paperback-iOS/extensions-common
Common models and type definitions for developing a Paperback source
MITJul 31, 2026 · metrics 2.5.0
npm
Roam-Research/roam-tools
Official MCP and CLI for Roam Research
No licenseJul 19, 2026 · metrics 2.5.0
RubyGems
Shopify/event_stream_parser
A lightweight, fully spec-compliant parser for the event stream format.
MITJul 20, 2026 · metrics 2.5.0
crates.io
Specy/microlp
A pure Rust MILP solver
Apache-2.0Jul 17, 2026 · metrics 2.5.0
—
actions/attest-sbom
Action for generating SBOM attestations for workflow artifacts
MITJul 24, 2026 · metrics 2.5.0
npm
activecampaign/postmark-mcp
Official Postmark MCP server by ActiveCampaign — 24 tools to send, template, search, and diagnose transactional email from Claude, Cursor & other AI assistants.
MITJul 17, 2026 · metrics 2.5.0
Go
agilezebra/jwt-middleware
Traefik Middleware Plugin for Dynamic JWT Validation
Custom licenseJul 19, 2026 · metrics 2.5.0
—
agonzalezro/go-polo
Static site generator written in Go and "compatible" with Jekyll & Pelican content
MITJul 18, 2026 · metrics 2.5.0
PyPI
andreasvc/disco-dop
Discontinuous Data-Oriented Parsing
GPL-2.0Jul 15, 2026 · metrics 2.5.0
Packagist
andrewdwallo/filament-selectify
Two alternative fields for toggles, radio buttons, and other selectors.
MITJul 22, 2026 · metrics 2.5.0
RubyGems
ankane/mittens
Stemming for Ruby, powered by Snowball
BSD-3-ClauseAug 5, 2026 · metrics 2.5.0
RubyGems
apotonick/erbse
Next-generation ERB.
MITJul 20, 2026 · metrics 2.5.0
npm
aws/jsii-compiler
The jsii compiler for TypeScript
Apache-2.0Jul 31, 2026 · metrics 2.5.0
crates.io
awxkee/moxcms
Fast and safe color management system in Rust
BSD-3-ClauseJul 23, 2026 · metrics 2.5.0
—
bitcoin-core/bitcoin-detached-sigs
Bitcoin detached release signatures
No licenseJul 26, 2026 · metrics 2.5.0
Hex
bokner/solverl
Erlang/Elixir interface to MiniZinc.
MITJul 17, 2026 · metrics 2.5.0
npm
bump-sh/github-action
GitHub action to deploy your API documentation on Bump
MITJul 25, 2026 · metrics 2.5.0
PyPI
c0r0n3r/cryptolyzer
CryptoLyzer is a fast, flexible and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI. (read-only clone of the original GitLab project)
MPL-2.0Jul 27, 2026 · metrics 2.5.0
Packagist
cakephp/datasource
[READ-ONLY] Provides connection managing and traits for Entities and Queries that can be reused for different datastores. This repo is a split of the main code that can be found in https://github.com/cakephp/cakephp
Custom licenseJul 14, 2026 · metrics 2.5.0
Go
catenacyber/perfsprint
Golang linter to use strconv
MITAug 4, 2026 · metrics 2.5.0
Maven
cbioportal/genome-nexus
Backend server for Genome Nexus
MITJul 19, 2026 · metrics 2.5.0
Go
charithe/durationcheck
Go linter to detect erroneous multiplication of duration values
Apache-2.0Aug 4, 2026 · metrics 2.5.0
crates.io
clap-rs/term_size-rs
Functions for determining terminal sizes in Rust
Apache-2.0Jul 20, 2026 · metrics 2.5.0
—
clojure/tools.tools
Clojure CLI tool for managing Clojure CLI tools
EPL-1.0Aug 6, 2026 · metrics 2.5.0
Go · npm
code-cargo/cargowall
eBPF Firewall for GitHub Actions
Apache-2.0Jul 27, 2026 · metrics 2.5.0
Packagist · npm
craftcms/ckeditor
Edit rich text content in Craft CMS using CKEditor.
GPL-3.0Jul 16, 2026 · metrics 2.5.0
crates.io · npm · PyPI
csm/clojurust
Clojure and Rust
Custom licenseJul 14, 2026 · metrics 2.5.0
npm
dipeshrai123/react-ui-animate
Create smooth animations and interactive gestures in React applications effortlessly :computer:
MITJul 15, 2026 · metrics 2.5.0
Hex
erlef/mix_sbom
Mix task to generate a Software Bill-of-Materials (SBoM) in CycloneDX format
Custom licenseJul 17, 2026 · metrics 2.5.0