Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,376
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,736 recordsRanked by popularity · browse by tag · record statistics
npm
28At Riskhealth index
BolajiOlajide/ng-banks
Lightweight Zero dependency npm package to get list of banks in Nigeria (Recognized by CBN)
TypeScript★ 51↓ 6,055/moOct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
—
31At Riskhealth index
CTUAvastLab/JsonGrinder.jl
Machine learning with Mill.jl for JSON documents
Julia★ 51Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
JinyuanSun/DDGScan
DDGScan: an integrated parallel workflow for the in silico point mutation scan of protein
Python★ 51Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
danielfriis/ruby_llm-template
Organize prompts into reusable templates for RubyLLM
Ruby★ 51Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
mageplaza/magento-2-gdpr
Magento 2 GDPR extension helps online stores which are directly affected by GDPR, Mageplaza is about to release an extension called Mageplaza GDPR for Magento 2. This module is to supports online stores to comply those data privacy regulations.
PHP · HTML★ 51↓ 4,399/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
31At Riskhealth index
plumelo/rollup-plugin-styler
🎨 Universal Rollup plugin for styles: PostCSS, Sass, Less, Stylus and more.
TypeScript · JavaScript★ 51↓ 215.7K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/trim-lines
Remove spaces and tabs around line-breaks
JavaScript★ 51↓ 207M/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
22At Riskhealth index
jonschlinkert/repeat-string
Repeat the given string n times. Fastest implementation for repeating a string (2x faster than the native method)
JavaScript★ 50↓ 84.9M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
microsoft/sarif-python-om
Python classes for the SARIF object model
Python★ 50↓ 2.5M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
25At Riskhealth index
vweevers/hallmark
Markdown Style Guide, with linter and automatic fixer.
JavaScript★ 50↓ 3,440/moOct 18, 2026
GPL-3.0Oct 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
wharfkit/antelope
Moved to wharfkit/js
TypeScript★ 49Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
anguslees/kubecfg
A tool for managing complex enterprise Kubernetes environments as code.
Rust★ 48Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
npm
38Weakhealth index
ForbesLindesay/acorn-globals
Use acorn to detect global variables in JavaScript
JavaScript★ 47↓ 102M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
andreasvc/disco-dop
Discontinuous Data-Oriented Parsing
Python · Cython★ 47Oct 22, 2026
GPL-2.0Oct 22, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
beluga-php/docker-php
A Docker client in PHP
PHP★ 47↓ 81.7K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
14Criticalhealth index
sindresorhus/p-finally
`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome
JavaScript★ 47↓ 153M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
OpenIdentityPlatform/OpenICF
OpenICF is an open-source identity connector framework that integrates identity management systems with various resources. It enables secure provisioning, synchronization, and management of user accounts across diverse platforms and applications.
Java · Groovy★ 46Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
imagekit-developer/imagekit-php
PHP SDK for ImageKit.io API.
PHP★ 46↓ 61.2K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
15Criticalhealth index
movibe/memory-bank-mcp
MCP Server para gerenciar o Memory Bank
TypeScript★ 46↓ 181/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
cube-js/cube-ui-kit
UI Framework for Cube Projects. Based on React Aria and tasty style engine.
TypeScript · MDX★ 45↓ 75.3K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
dtabuenc/karma-html-reporter
Karma Html Reporter Plugin
JavaScript · HTML★ 45↓ 52.6K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
litixsoft/karma-detect-browsers
Karma runner plugin for detecting all browsers installed on the current system.
JavaScript★ 45↓ 267.6K/moOct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
ndf-zz/asfv1
Alternate Assembler for Spin Semi FV-1
Python★ 45↓ 52/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
24At Riskhealth index
wlynxg/anet
fix go bug #68082 #40569
Go★ 45Oct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
xrmx/pyuwsgimemhog
Find memory leaks in your application by parsing uWSGI logs
Python★ 45↓ 92/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
26At Riskhealth index
bradlindblad/tidyUSDA
An interface to USDA Quick Stats data with mapping capabilities.
R · HTML★ 44Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
25At Riskhealth index
domenic/path-is-inside
Tests whether one path is inside another path
JavaScript★ 44↓ 52.3M/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
20At Riskhealth index
mrkmg/node-external-editor
Edit a string with the users preferred text editor using $VISUAL or $EDITOR
JavaScript · TypeScript★ 44↓ 87M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0