Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,437
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,760 recordsRanked by popularity · browse by tag · record statistics
Maven · npm
26At Riskhealth index
oerpub/Aloha-Editor
OERPUB Aloha Editor is a repo for the development of Aloha plugins, models, tests, and examples for use in the production of books and open educational resources. We intend to commit all code back to Aloha when plugins reach maturity.
JavaScript · HTML★ 22Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
16Criticalhealth index
oncojs/lolliplot
Chart to aid in understanding mutations and their location on a gene.
Mixed★ 22↓ 12/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
thomcc/fast-srgb8
Fast conversion between linear float and 8-bit sRGB
Rust★ 22↓ 4.1M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
20At Riskhealth index
vkomulai/finnish-bank-utils
A micro Javascript library for validating and creating Finnish IBAN bank account numbers and reference numbers
JavaScript★ 22↓ 8,178/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
ytsaurus/ytsaurus-spyt
YTsaurus SPYT provides an integration with Apache Spark
Scala · Python★ 22Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
22At Riskhealth index
OffCourse/offcourse-next
Repository for open source contribution to the Offcourse platform. Open to Javascript developers of all levels!
JavaScript★ 21↓ 303/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
33At Riskhealth index
Zweih/qp
qp - Query Packages. Query installed packages across ecosystems on Linux and macOS.
Go★ 21Oct 21, 2026
GPL-3.0Oct 21, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
dfm/kepler.py
Fast and stable solver for Kepler's equation in Python
Python · C++★ 21↓ 1,622/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Go
9Criticalhealth index
irdkwmnsb/webrtc-grabber
Grabber application for stealthily peeking at other computer's screens
Go · HTML · JavaScript★ 21Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
li-plus/rouge-metric
A Python wrapper of the official ROUGE-1.5.5.pl script and a re-implementation of full ROUGE metrics.
Perl · Python★ 21↓ 247.9K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
24At Riskhealth index
mahdyar/ansi-html-community
An elegant lib that converts the chalked text to HTML.
JavaScript★ 21↓ 67.2M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
31At Riskhealth index
stjohnjohnson/cucumber-junit
Cucumber.js JSON to JUnitXML converter
JavaScript★ 21↓ 203.3K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
22At Riskhealth index
IndigoUnited/js-err-code
Create error instances with a code
JavaScript★ 20↓ 115M/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
Go
19Criticalhealth index
MuratDoganer/seer
No repository description published.
Go★ 20Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Maven
6Criticalhealth index
crashinvaders/gdx-lml
:octocat: LibGDX utility libraries.
Java★ 20Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
35Weakhealth index
isaacs/proto-list
A list of objects bound by prototype chain
JavaScript★ 20↓ 98.7M/moOct 20, 2026
BlueOak-1.0.0Oct 20, 2026 · metrics 2.10.0
npm
11Criticalhealth index
karma-runner/karma-safari-launcher
A Karma plugin. Launcher for Safari.
JavaScript · CoffeeScript · HTML★ 20↓ 607.8K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
ormeilu/avoid-ai-writing-russian
Скилл для ИИ-агентов и CLI на Python/uv: находит и убирает ИИ-стиль в русских текстах (канцелярит, кальки, штампы), проверяет сохранность правки и оценивает текст по фрагментам в духе «Антиплагиата» с калибровкой по вашим отчётам. Русская адаптация avoid-ai-writing.
Python★ 20↓ 7,274/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
18Criticalhealth index
svaarala/duktape-releases
Duktape release binaries
Shell★ 20Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
valtimo-platform/valtimo-backend-libraries
Welcome at the Valtimo repository. Valtimo is the less-code platform for Business Process Automation. Built on top of business process orchestrator Camunda. Valtimo's goal is to make implementing business process automation and case management easy. Valtimo is the server side component for business process automation.
Kotlin · Java★ 20Oct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
16Criticalhealth index
yargs/require-main-filename
shim for require.main.filename() that works in as many environments as possible
JavaScript★ 20↓ 208M/moOct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
crates.io · npm
23At Riskhealth index
GrinZero/dpdm-fast
Detect circular dependencies in your TypeScript projects with `Rust`.
Rust · TypeScript★ 19Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
8Criticalhealth index
airano-ir/skillhub
Open-source marketplace for AI Agent skills
TypeScript★ 19↓ 1,059/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
17Criticalhealth index
aurelia/pal
Aurelia's Platform Abstraction Layer
JavaScript★ 19↓ 104.9K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
binbandit/sage
Burning away Git complexity
Go★ 19Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
brettcannon/modutil
A library for working with Python modules
Python★ 19Oct 23, 2026
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
10Criticalhealth index
bryanrsmith/eslint-plugin-prefer-object-spread
ESLint rule for suggesting that object spread properties be used instead of Object.assign()
JavaScript★ 19↓ 136.1K/moOct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
Go · npm
28At Riskhealth index
coretrix/hitrix
No repository description published.
Go★ 19Oct 19, 2026
GPL-3.0Oct 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
ealush/flairup
🎩 CSS-In-JS Library for package authors
TypeScript★ 19↓ 5.2M/moOct 16, 2026
MITOct 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
jonschlinkert/is-extendable
Answers the question: "can this value have keys?". Returns true if a value is any of the object types: array, regexp, plain object, function or date. Useful for determining if a value is an object that can be extended.
JavaScript★ 19↓ 243M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0