Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,407
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,750 recordsRanked by popularity · browse by tag · record statistics
crates.io
26At Riskhealth index
VladimirMarkelov/rclc
Mathematical expression calculator with big integers, floats, common fractions, and complex numbers support
Rust★ 28↓ 6/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
aptible/aptible-cli
[DEPRECATED] Old command line interface to Aptible. This has been replaced by a new CLI: https://www.aptible.com/docs/reference/aptible-cli/overview
Ruby★ 28Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
25At Riskhealth index
graphprotocol/common-ts
Common TypeScript library for use in Graph Protocol components
TypeScript★ 28↓ 2,595/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
8Criticalhealth index
octet-stream/form-data-encoder
Encode FormData content into the multipart/form-data format
TypeScript★ 28↓ 118M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
25At Riskhealth index
tlvince/make-coverage-badge
Create a coverage badge
JavaScript★ 28↓ 146.3K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
Pylons/translationstring
A library used for internationalization (i18n) duties related to translation.
Python★ 27↓ 2.1M/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Go
19Criticalhealth index
apache/incubator-horaedb-meta
Meta service of HoraeDB cluster.
Go★ 27Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
—
14Criticalhealth index
fflewddur/archivo
A cross-platform app for saving recordings from a TiVo to your computer.
Java★ 27Oct 18, 2026
GPL-3.0Oct 18, 2026 · metrics 2.10.0
—
26At Riskhealth index
leggedrobotics/grid_map
Universal grid map library for mobile robotic mapping
C++★ 27Oct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
npm
24At Riskhealth index
nexdrew/which-module
:m: Find the module object for something that was require()d
JavaScript★ 27↓ 204M/moOct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
stathis-alexander/boba
Custom tapioca compilers.
Ruby★ 27Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
Rich-Harris/is-reference
Determine whether an AST node is a reference
JavaScript★ 26↓ 115M/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
Yuri6037/time-tz
Implementation of tz database (IANA) for time Rust crate.
Rust★ 26↓ 197.4K/moOct 22, 2026
BSD-3-ClauseOct 22, 2026 · metrics 2.10.0
PyPI
40Weakhealth index
alice-biometrics/lume
:fire: Lume helps you with your daily dev operations and ease the CI & CD process.
Python★ 26Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
30At Riskhealth index
aurelia/metadata
Utilities for reading and writing the metadata of JavaScript functions.
TypeScript · JavaScript★ 26↓ 107.8K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
15Criticalhealth index
bgentry/go-netrc
netrc file parser for Go programming language.
Go★ 26Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
40Weakhealth index
css-modules/postcss-modules-scope
A CSS Modules transform to extract export statements from local-scope classes
JavaScript · CSS★ 26↓ 110M/moOct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
npm · PyPI
8Criticalhealth index
dusanlazic/fast
🚩 Flag Acquisition and Submission Tool — Make writing exploits your only concern during A/D
Python · Vue★ 26Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
executablebooks/sphinx-comments
hypothes.is interaction layer with Sphinx
Python · HTML★ 26↓ 127K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
35Weakhealth index
pinojs/pino-arborsculpture
🌲 Change Pino log levels in a running process
JavaScript★ 26↓ 9,619/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
31At Riskhealth index
ppillot/biomsalign
JavaScript library for Multiple Sequence Alignment
TypeScript★ 26↓ 37.3K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
19Criticalhealth index
arduino/ArduinoModule-CMSIS-Atmel
Atmel Smart ARM devices CMSIS module for Arduino IDE
C★ 25Oct 20, 2026
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
delimitry/compressed_rtf
Compressed Rich Text Format (RTF) compression and decompression in Python
Python★ 25↓ 6.7M/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
jtg-gg/node-webkit
Call all Node.js modules directly from DOM and enable a new way of writing applications with all Web technologies.
C++★ 25Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
—
18Criticalhealth index
labplus-cn/mkfatfs
A tools use for pack/unpack flash file system.
C · C++★ 25Oct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
smarie/python-decopatch
python decorators made easy.
Python★ 25↓ 1.2M/moOct 19, 2026
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
wirenboard/homeui
Wiren Board web interface
TypeScript · Jinja★ 25Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
ConradIrwin/interception
Listen to raise in ruby
Ruby · C★ 24Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0