Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,612
Monthly downloads under inspection
558B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,468 recordsRanked by popularity · browse by tag · record statistics
RubyGems
12Criticalhealth index
ruby-concurrency/atomic
Atomic references for Ruby (merged with concurrent-ruby)
Ruby · Java · C★ 25Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
ruby/set
This library provides the Set class, which deals with a collection of unordered values with no duplicates.
Ruby★ 25Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 2.10.0
Go
37Weakhealth index
sivchari/containedctx
containedctx is a linter that detects struct contained context.Context field
Go★ 25Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
wasix-org/static-web-server
A blazing fast and asynchronous web server for static files-serving. ⚡
Rust★ 25Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
wirenboard/homeui
Wiren Board web interface
TypeScript · Jinja★ 25↓ 14/moAug 9, 2026
MITAug 9, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/widget
Widgets are reusable building blocks used to create complex and configurable user interface elements in an object-oriented fashion
PHP★ 25↓ 11.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
Alexhuszagh/minimal-lexical
Minimal float parser primitives with a focus on compile times.
Rust★ 24↓ 31.3M/moAug 3, 2026
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Alwatr/alwatr
The Alwatr Developer Kit is a comprehensive ecosystem designed to facilitate your development process. It comprises a diverse range of tools and libraries, empowering you to construct robust applications with enhanced efficiency.
TypeScript · JavaScript★ 24↓ 1,083/moAug 8, 2026
MPL-2.0Aug 8, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
ConradIrwin/interception
Listen to raise in ruby
Ruby · C★ 24Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
25At Riskhealth index
bruceiv/egg
C++11 Parsing Expression Grammar Generator
C++★ 24Aug 20, 2026
MITAug 20, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
dfinance/dvm
dfinance Virtual Machine for Move language
Rust★ 24Aug 11, 2026
Custom licenseAug 11, 2026 · metrics 2.10.0
npm
40Weakhealth index
gulpjs/now-and-later
Map over an array or object of values in parallel or series, passing each through the async iterator, with optional lifecycle hooks.
JavaScript★ 24↓ 12.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
4Criticalhealth index
kimjongum/FuckMinZhengTong
代替福建省强制使用的垃圾闽政通APP,生成八闽健康码
JavaScript · CSS★ 24Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
npm
28At Riskhealth index
knownasilya/cli-width
Fallback to a default if `process.stdout.getWindowSize` doesn't exist
JavaScript★ 24↓ 277M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
meziantou/WPFFontAwesome
Use FontAwesome in WPF application
C#★ 24Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
moon1ite/koco
Easy installer of kocohub dataset
Python★ 24Sep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
npm
15Criticalhealth index
msobkyy/backbook-server
Mern Facebook Clone with real time Messages Server (MongoDB, Express.js, React.js, Node.js, and Socket.io)
JavaScript · Pug★ 24Aug 7, 2026
No licenseAug 7, 2026 · metrics 2.10.0
npm
28At Riskhealth index
nexdrew/ansi-align
:abcd: align-text with ANSI support for CLIs
JavaScript★ 24↓ 97.8M/moAug 29, 2026
ISCAug 29, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
paragonie/phpecc
Pure PHP Elliptic Curve Cryptography Library
PHP★ 24↓ 49.5K/moAug 19, 2026
No licenseAug 19, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
spatie/Laravel-Excel
🚀 Supercharged Excel exports and imports in Laravel
PHP★ 24Aug 11, 2026
MITAug 11, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/attributes
PHP Attributes Reader. Subtree split of the Spiral Attributes component (see spiral/framework)
PHP★ 24↓ 340.1K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
23At Riskhealth index
whitemech/lydia
A tool for LDLf translation to DFA and for LDLf synthesis.
C++★ 24Sep 5, 2026
LGPL-3.0Sep 5, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/aliases
Named paths and URLs storage
PHP★ 24↓ 36.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/rbac-php
RBAC PHP file storage.
PHP★ 24↓ 3,350/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
Backs/Collections.Analyzer
Roslyn-based diagnostics for collections.
C#★ 23Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
Codeception/module-db
DB module for Codeception
PHP★ 23↓ 513.4K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
23At Riskhealth index
DGAC/inseca
INSECA is a set of tools to build and manage very secure live Linux based endpoint systems.
Python★ 23Aug 23, 2026
GPL-3.0Aug 23, 2026 · metrics 2.10.0
Go
13Criticalhealth index
Noksa/gokeenapi
A convenient utility to run commands on Keenetic (Netcraze) routers via REST API
Go★ 23Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0