Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,487
Monthly downloads under inspection
581B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,685 recordsRanked by popularity · browse by tag · record statistics
PyPI
27At Riskhealth index
click-contrib/click-log
Simple and beautiful logging for click applications
Python★ 109↓ 4.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
ethereum-optimism/asterisc
RISC-V interactive fault proof tech
Go · Solidity★ 109Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
farcaster-project/farcaster-node
Farcaster cross-chain atomic swap node.
Rust★ 109↓ 22/moAug 16, 2026
MITAug 16, 2026 · metrics 2.10.0
Hex
33At Riskhealth index
fcevado/phone
Elixir phone number parser for numbers in international standard.
Elixir★ 109↓ 8,502/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
12Criticalhealth index
github/homebrew-gh
Homebrew tap for the GitHub CLI
Mixed★ 109Aug 1, 2026
No licenseAug 1, 2026 · metrics 2.10.0
19Criticalhealth index
googleapis/python-translate
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-translate
Mixed★ 109Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.10.0
npm
25At Riskhealth index
landakram/remark-wiki-link
Parse and render wiki links.
TypeScript · JavaScript★ 109↓ 76.6K/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
14Criticalhealth index
urbit/arvo
No repository description published.
Mixed★ 109Jul 21, 2026
No licenseJul 21, 2026 · metrics 2.10.0
npm
25At Riskhealth index
JoshGlazebrook/smart-buffer
smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.
TypeScript★ 108↓ 235M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
andylokandy/arraydeque
A circular buffer with fixed capacity (Rust).
Rust★ 108↓ 5.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
crates.io
22At Riskhealth index
japaric/syscall.rs
Raw system calls for Rust
Rust★ 108↓ 57.3K/moJul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/keel
Spinnaker's declarative service
Kotlin★ 108Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
aresponses/aresponses
Asyncio http mocking. Similar to the responses library used for 'requests'
Python★ 107↓ 107.4K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
chef-boneyard/chef-api
DEPRECATED: A tiny Chef API client with minimal dependencies
Ruby★ 107Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
dask/partd
Concurrent appendable key-value storage
Python★ 107↓ 22.9M/moAug 27, 2026
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
31At Riskhealth index
jonschlinkert/isobject
Is the value an object, and not an array or null?
JavaScript★ 107↓ 242M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
53Moderatehealth index
prismicio-community/php-kit
Community maintained development kit for Prismic and the PHP language
PHP★ 107↓ 13.2K/moJul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
npm
35Weakhealth index
sindresorhus/hard-rejection
Make unhandled promise rejections fail hard right away instead of the default silent fail
JavaScript · TypeScript★ 107↓ 52.2M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
Hex
37Weakhealth index
lpil/icalendar
🗓️ A small library for reading and writing ICalendar files.
Elixir★ 106↓ 12.4K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
30At Riskhealth index
pyth-network/pyth-client-js
Javascript API for on-chain pyth account structure
TypeScript★ 106↓ 117.8K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
npm
36Weakhealth index
sindresorhus/is-plain-obj
Check if a value is a plain object
JavaScript · TypeScript★ 106↓ 450M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
aVadim483/fast-excel-reader
Lightweight and very fast XLSX Excel Spreadsheet and CSV Reader in PHP
PHP★ 105↓ 47.2K/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
kafka-python-ng/kafka-python-ng
Fork for Python client for Apache Kafka
Python★ 105Aug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
lkreidberg/batman
Fast transit light curves models in Python.
TeX · Python · C★ 105↓ 19K/moSep 6, 2026
GPL-3.0Sep 6, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
rectorphp/type-perfect
Next level type declaration check PHPStan rules
PHP★ 105↓ 494.6K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
30At Riskhealth index
JuliaLang/Tokenize.jl
Tokenization for Julia source code
Julia★ 104Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
Go
34At Riskhealth index
Kong/kong-operator
Kubernetes Operator for Kong Gateways
Go★ 104Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/KDFs
Collection of Key Derivation Functions written in pure Rust
Rust★ 104↓ 19.1M/moAug 8, 2026
No licenseAug 8, 2026 · metrics 2.10.0
Hex
20At Riskhealth index
balance-platform/pillar
Elixir library client for work with ClickHouse
Elixir★ 104↓ 6,952/moJul 20, 2026
No licenseJul 20, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
brainets/frites
Framework for Information Theoretical analysis of Electrophysiological data and Statistics
Python★ 104Aug 25, 2026
BSD-3-ClauseAug 25, 2026 · metrics 2.10.0