Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,540
Monthly downloads under inspection
579B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,604 recordsRanked by popularity · browse by tag · record statistics
Go
42Weakhealth index
NillionNetwork/nilchain
Coordination layer for the Nillion Network
Go★ 35Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
Go
8Criticalhealth index
cnaize/meds
Meds — Hybrid firewall using public blocklists
Go★ 35Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
eyre-rs/indenter
Display trait indentation helper for errors
Rust★ 35Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
forcedotcom/lightning-language-server
LWC and Aura Language Servers - shipped as part of the Salesforce VSCode Extensions
JavaScript · TypeScript★ 35↓ 6,118/moJul 25, 2026
BSD-3-ClauseJul 25, 2026 · metrics 2.10.0
Go
8Criticalhealth index
freislot/kiri
Minimalist & smart Go-based TUI assistant for plant care. Tracks watering schedules locally with SQLite, syncs with Open-Meteo API, and supports status bar integrations.
Go★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
idlesign/deflacue
Cue Sheet driven FLAC audio splitter
Python★ 35Aug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
31At Riskhealth index
inie0722/air-ctl
C Language Template Library C语言 模板库
C · C++★ 35Jul 25, 2026
BSL-1.0Jul 25, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
jinko-core/jinko
Jinko is a small and safe interpreted language with fast Rust and C FFI
Rust★ 35Jul 24, 2026
GPL-2.0Jul 24, 2026 · metrics 2.10.0
npm
20At Riskhealth index
jonschlinkert/global-modules
Returns the directory used by NPM for globally installed NPM packages.
JavaScript★ 35↓ 123M/moAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
30At Riskhealth index
jslicense/spdx-correct.js
correct invalid SPDX identifiers
JavaScript★ 35↓ 155M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Go
32At Riskhealth index
kovidgoyal/imaging
Go library for dealing with images, colorspaces, metadata, simple transforms
Go★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-router
Flexible routing for PSR-7 applications
PHP★ 35↓ 629.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
micktwomey/pyiso8601
ISO8601 formatted datetime parser for python
Python · Just★ 35↓ 11.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
13Criticalhealth index
rega-cev/virulign
VIRULIGN: fast codon-correct alignment and annotation of viral genomes
C · C++★ 35Aug 24, 2026
GPL-2.0Aug 24, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
umbrellio/laravel-ltree
LTree Extension (PostgreSQL) for Laravel
PHP★ 35↓ 3,360/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Go
36Weakhealth index
4meepo/tagalign
Align and sort tags for Go struct.
Go★ 34Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
26At Riskhealth index
A11yance/axobject-query
Programmatic access to information about the AXObject Model
JavaScript★ 34↓ 207M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
CaveNightingale/uuid-remapper
No repository description published.
Rust★ 34Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
allure-framework/allure-php-api
PHP API for Allure Framework
PHP★ 34↓ 47.9K/moAug 10, 2026
Apache-2.0Aug 10, 2026 · metrics 2.10.0
31At Riskhealth index
daniele77/aricpp
Asterisk ARI interface bindings for modern C++
C++★ 34Jul 25, 2026
BSL-1.0Jul 25, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
dmdhrumilmistry/offat
Tests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.
Python★ 34Aug 7, 2026
MITAug 7, 2026 · metrics 2.10.0
19Criticalhealth index
googleapis/python-monitoring
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-monitoring
Mixed★ 34Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.10.0
npm
25At Riskhealth index
kevva/astral-regex
Regular expression for matching astral symbols
JavaScript · TypeScript★ 34↓ 132M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
30At Riskhealth index
Go★ 34Aug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
pradyunsg/sphinx-basic-ng
A modernised skeleton for Sphinx themes.
HTML · Python · CSS★ 34Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
robertfausk/behat-panther-extension
Run your behat tests in a headless chrome/firefox - Symfony Panther extension for Behat
PHP★ 34↓ 73.2K/moJul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tenphi/tasty
A deterministic styling engine for stateful component systems.
TypeScript★ 34↓ 7,394/moJul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
volkamerlab/kissim
Subpocket-based fingerprint for kinase pocket comparison
Python★ 34Sep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/config
Configuration management
PHP★ 34↓ 18.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
yiisoft/hydrator
Create and populate objects with type casting, mapping and dependencies resolving support.
PHP★ 34↓ 14.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0