Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,489
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,124 recordsRanked by popularity · browse by tag · record statistics
RubyGems
21At Riskhealth index
t6d/smart_properties
Ruby accessors on steroids
Ruby★ 180Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
19Criticalhealth index
PostHog/code
The era of self-driving development is here
TypeScript★ 179Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
akshaynagpal/w2n
Convert number words (eg. twenty one) to numeric digits (21)
Python★ 179↓ 1.8M/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
27At Riskhealth index
medikoo/es5-ext
ECMAScript extensions (with respect to upcoming ECMAScript features)
JavaScript★ 179↓ 49.1M/moSep 23, 2026
ISCSep 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-sphinx
Yii 2 Sphinx extension.
PHP★ 179↓ 12K/moSep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
—
30At Riskhealth index
ztangent/Julog.jl
A Julia package for Prolog-style logic programming.
Julia★ 179Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
14Criticalhealth index
Kryptos-FR/markdig.wpf
A WPF library for xoofx/markdig https://github.com/xoofx/markdig
C#★ 178Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
23At Riskhealth index
blendle/zapdriver
Blazing fast, Zap-based Stackdriver logging.
Go★ 178Sep 23, 2026
ISCSep 23, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mathiask88/node-snap7
node.js wrapper for snap7
C++★ 178↓ 4,838/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
medz/id-card-of-china
🆔一个基于「公民身份号码」规则获取身份证号码中包含的基础信息组件(PHP)
PHP★ 178↓ 75/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
23At Riskhealth index
nodeftpd/nodeftpd
FTP Server in Node
JavaScript★ 178↓ 10.5K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
EsotericSoftware/minlog
Minimal overhead Java logging
Java★ 177Oct 20, 2026
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
21At Riskhealth index
kevinbeaty/any-promise
NOTE: You probably want native promises now
JavaScript★ 177↓ 212M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
microsoft/ai-chat-protocol
A library + API spec for easily streaming generative AI output to your chat applications.
TypeScript★ 177Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
32At Riskhealth index
notaryproject/specifications
Cross tooling and interoperability specifications
Mixed★ 177Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
s3gw-tech/s3gw
Container able to run on a Kubernetes cluster, providing S3-compatible endpoints to applications.
Python · Shell★ 177Oct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
45Weakhealth index
ActiveCampaign/postmark-php
The official PHP library for Postmark.
PHP★ 176↓ 299.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
PyCQA/doc8
Style checker for sphinx (or other) rst documentation.
Python★ 176↓ 825K/moSep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
14Criticalhealth index
VividCortex/gohistogram
Streaming approximate histograms in Go
Go★ 176Sep 26, 2026
MITSep 26, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
gweis/isodate
ISO 8601 date/time parser
Python★ 176↓ 173M/moOct 23, 2026
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
21At Riskhealth index
mathiasbynens/cssesc
A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.
HTML · JavaScript★ 176↓ 320M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
22At Riskhealth index
tracebox/tracebox
Tracebox, a middlebox detection tool
C++ · M4★ 176Oct 20, 2026
GPL-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
babel/ruby-babel-transpiler
Ruby Babel is a bridge to the JS Babel transpiler.
Ruby · Shell★ 175Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
dkubb/yardstick
A tool for verifying YARD documentation coverage
Ruby★ 175Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
23At Riskhealth index
trentm/node-dashdash
A light, featureful and explicit option parsing library for node.js.
JavaScript · Shell★ 175↓ 77.5M/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
chtd/psycopg2cffi
Port to cffi with some speed improvements
Python★ 174↓ 12.9K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
jawira/case-converter
Convert strings between 13 naming conventions: Snake case, Camel case, Kebab case, Pascal case, Ada case, Train case, Cobol case, Macro case, Upper case, Lower case, Title case, Sentence case and Dot notation.
PHP · Gherkin★ 174↓ 329.2K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-mvc
Laminas's event-driven MVC layer, including MVC Applications, Controllers, and Plugins
PHP★ 174↓ 463.7K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
NuGet
18Criticalhealth index
vb-consulting/Norm.net
Norm.net is an innovative and high-performance Database Access for .NET Standard 2.1 and higher
C#★ 174Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0