Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,178
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,872 recordsRanked by popularity · browse by tag · record statistics
npm
20At Riskhealth index
Tatamo/atcoder-cli
AtCoder command line tools
TypeScript★ 644↓ 536/moSep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
22At Riskhealth index
Frissi0n/GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Python★ 639Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
facade/ignition-contracts
The contracts used to display solutions on Ignition and Flare
PHP★ 636↓ 2.3M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
crates.io
43Weakhealth index
seanmonstar/num_cpus
Get the number of CPUs in Rust
Rust★ 627↓ 28.6M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
68Goodhealth index
mozilla/django-csp
Content Security Policy for Django.
Python★ 624↓ 4M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
Behat/MinkExtension
Mink extension (tight integration and configuration) for Behat
PHP★ 621↓ 53.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nalgeon/codapi-js
Interactive code examples for documentation, education and fun.
JavaScript★ 620↓ 2,642/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io · npm
42Weakhealth index
RReverser/serde-wasm-bindgen
Native integration of Serde with wasm-bindgen
Rust★ 614↓ 4.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/caniuse-lite
A smaller version of caniuse-db, with only the essentials!
JavaScript★ 613↓ 744M/moSep 16, 2026
CC-BY-4.0Sep 16, 2026 · metrics 2.10.0
npm
23At Riskhealth index
hiddentao/fast-levenshtein
Efficient Javascript implementation of Levenshtein algorithm with locale-specific collator support.
JavaScript★ 613↓ 517M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
matteosister/GitElephant
An abstraction layer for git written in PHP
PHP★ 612↓ 43K/moSep 20, 2026
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
crates.io
22At Riskhealth index
withoutboats/heck
oh heck, a case conversion library
Rust★ 598↓ 93.2M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
23At Riskhealth index
Netflix/unleash
Professionally publish your JavaScript modules in one keystroke
JavaScript★ 597↓ 880/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm · Maven
19Criticalhealth index
jonathanpalma/react-native-tesseract-ocr
Tesseract OCR wrapper for React Native
Java · JavaScript · Ruby★ 596↓ 450/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
mrachinskiy/jewelcraft
Blender add-on for jewelry design
Python★ 594Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
25At Riskhealth index
bw2012/UE4VoxelTerrain
Unreal Engine 4: Smooth voxel terrian example
C++ · Cuda★ 593Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
36Weakhealth index
sindresorhus/escape-string-regexp
Escape RegExp special characters
JavaScript · TypeScript★ 593↓ 1.3B/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
20At Riskhealth index
rain1017/memdb
Distributed Transactional In-Memory Database (全球首个支持分布式事务的MongoDB)
JavaScript★ 590↓ 80/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
35Weakhealth index
thomcc/rust-typed-arena
The arena, a fast but limited type of allocator
Rust★ 590Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
NuGet
28At Riskhealth index
GowenGit/docnet
DocNET is as fast PDF editing and reading library for modern .NET applications
C#★ 588Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · PyPI
40Weakhealth index
AugurProject/augur-core
Augur v1 - Smart Contracts [DEPRECATED]
TypeScript · Python · Solidity★ 587↓ 2,618/moSep 22, 2026
GPL-3.0Sep 22, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
Misterio77/flavours
🎨💧 An easy to use base16 scheme manager that integrates with any workflow.
Rust★ 587↓ 72/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
32At Riskhealth index
TNK-Studio/lazykube
⎈ The lazier way to manage kubernetes.
Go★ 582Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
http-interop/http-factory-guzzle
HTTP factory implemented for Guzzle PSR7
PHP★ 581↓ 3M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-random/getrandom
A small cross-platform library for retrieving random data from (operating) system source
Rust★ 580↓ 187M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
rust-threadpool/rust-threadpool
A very simple thread pool for parallel task execution
Rust★ 577↓ 6.3M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
27At Riskhealth index
fsevents/fsevents
Native access to MacOS FSEvents in Node.js
C · JavaScript★ 569↓ 131M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
enyim/EnyimMemcached
C# Memcached client
C#★ 568Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
openzipkin/zipkin-js
Zipkin instrumentation for Node.js and browsers
JavaScript★ 568↓ 91.3K/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0