Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,915
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,174 recordsRanked by popularity · browse by tag · record statistics
—
38Weakhealth index
beiko-lab/arete
AMR/VF LGT focused bacterial genomics analysis workflow
Python · Nextflow★ 28Oct 26, 2026
MITOct 26, 2026 · metrics 2.10.0
npm
22At Riskhealth index
browserify/publicEncrypt
publicEncrypt/privateDecrypt for browserify
JavaScript★ 28↓ 39.2M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
26At Riskhealth index
colorjs/color-rgba
Get rgba array from color string
JavaScript★ 28↓ 4.9M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
craftcms/plugin-installer
Composer installer for Craft CMS plugins.
PHP★ 28↓ 53K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
elspethsoup/persistent_httparty
Persistent HTTP connections for HTTParty!
Ruby★ 28Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
38Weakhealth index
google/s2a-go
No repository description published.
Go★ 28Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
25At Riskhealth index
graphprotocol/common-ts
Common TypeScript library for use in Graph Protocol components
TypeScript★ 28↓ 2,595/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
28At Riskhealth index
here-be/snapdragon-node
Snapdragon utility for creating a new AST node in custom code, such as plugins.
JavaScript★ 28↓ 35.1M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
24At Riskhealth index
indutny/des.js
DES algorithm
JavaScript★ 28↓ 59.3M/moSep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
laminas/laminas-loader
Autoloading and plugin loading strategies
PHP★ 28↓ 878.7K/moSep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Go
26At Riskhealth index
moricho/tparallel
tparallel finds inappropriate usage of `t.Parallel()` method in your Go test codes
Go★ 28Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
8Criticalhealth index
octet-stream/form-data-encoder
Encode FormData content into the multipart/form-data format
TypeScript★ 28↓ 118M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go · PyPI
19Criticalhealth index
open-edge-platform/edge-node-agents
Agents installed as system services in the Edge Node OS
Go★ 28Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
10Criticalhealth index
pascalbros/IotaKit
IotaKit: The IOTA Swift API Library
Swift · C★ 28Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
rails-api/case_transform
Extraction of the key_transform abilities of ActiveModelSerializers
Ruby★ 28Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
scaccogatto/smooth-vuebar
[DEPRECATED — use overlayscrollbars-vue] Vue 3 directive wrapper for smooth-scrollbar (upstream unmaintained)
HTML · TypeScript · JavaScript★ 28↓ 82/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/modify-values
Modify the values of an object
JavaScript · TypeScript★ 28↓ 14.2M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
25At Riskhealth index
ssgreg/nlreturn
Checks for a new line before return and branch statements.
Go★ 28Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
20At Riskhealth index
sstur/draft-js-import-element
No repository description published.
Mixed★ 28Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
npm
25At Riskhealth index
tlvince/make-coverage-badge
Create a coverage badge
JavaScript★ 28↓ 146.3K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Hex
26At Riskhealth index
voltone/aws_rds_castore
AWS RDS CA certificate store for Elixir
Elixir★ 28↓ 38.1K/moOct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
npm
34At Riskhealth index
w8r/bresenham-zingl
Set of efficient Bresenham rasterisers ported from Alois Zingl' code
TypeScript★ 28↓ 88.9K/moOct 6, 2026
Custom licenseOct 6, 2026 · metrics 2.10.0
npm
21At Riskhealth index
watson/is-lambda
Detect if your code is running on an AWS Lambda server
JavaScript★ 28↓ 40.6M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/csrf
PSR-15 middleware implementing CSRF protection
PHP★ 28↓ 19.5K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/network-utilities
Network related utilities
PHP★ 28↓ 33K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
21At Riskhealth index
ChALkeR/safer-buffer
Modern Buffer API polyfill without footguns
JavaScript★ 27↓ 563M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Event
The EventEmitter is a simple pattern that allows you to create an object that emits events, and allow you to listen to those events.
PHP★ 27↓ 11.6K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
Laravel-Lang/attributes
Translation of form element names
PHP★ 27↓ 341.8K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
13Criticalhealth index
Noksa/gokeenapi
A convenient utility to run commands on Keenetic (Netcraze) routers via REST API
Go★ 27Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
37Weakhealth index
OpenFAM/OpenFAM
OpenFAM Reference Implementation
C++★ 27Sep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0