Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,813
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,163 recordsRanked by popularity · browse by tag · record statistics
—
19Criticalhealth index
diepthihoang/mpboot
MPBoot: Fast phylogenetic maximum parsimony tree inference and bootstrap approximation
C++ · C★ 21Sep 11, 2026
GPL-2.0Sep 11, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
elastic/elastic-transport-php
No repository description published.
PHP★ 21↓ 1.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
excid3/acts_as_tenant
Easy multi-tenancy for Rails in a shared database setup.
Ruby★ 21Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
faye/permessage-deflate-ruby
Per-message DEFLATE compression extension for WebSocket connections
Ruby★ 21Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
25At Riskhealth index
garyb/purescript-indexed-monad
No repository description published.
PureScript★ 21Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
33At Riskhealth index
here-be/snapdragon-util
Utilities for the snapdragon parser/compiler.
JavaScript★ 21↓ 35.1M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
intertwine/observational-memory
Local-first shared memory for Claude Code, Codex, OpenCode, Kimi, Grok, Cowork, and Hermes, with bounded observation and searchable Markdown context.
Python★ 21↓ 375/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
9Criticalhealth index
irdkwmnsb/webrtc-grabber
Grabber application for stealthily peeking at other computer's screens
Go · HTML · JavaScript★ 21Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
35Weakhealth index
isaacs/pseudomap
Like `new Map` but for older JavaScripts
JavaScript★ 21↓ 38.1M/moSep 15, 2026
BlueOak-1.0.0Sep 15, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
jenisys/parse_type
parse_type extends the "parse" module (opposite of "string.format()")
Python★ 21↓ 6.7M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
npm
21At Riskhealth index
jonschlinkert/define-property
Define a non-enumerable property on an object.
JavaScript★ 21↓ 200M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
28At Riskhealth index
jonschlinkert/object-visit
Call the given method on each value in the given object.
JavaScript★ 21↓ 37.8M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
crates.io · Go
31At Riskhealth index
kroma-network/zkevm-circuits
This is a mirror of zkevm-circuits(https://github.com/scroll-tech/zkevm-circuits).
Rust★ 21Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
li-plus/rouge-metric
A Python wrapper of the official ROUGE-1.5.5.pl script and a re-implementation of full ROUGE metrics.
Perl · Python★ 21↓ 247.9K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
24At Riskhealth index
mahdyar/ansi-html-community
An elegant lib that converts the chalked text to HTML.
JavaScript★ 21↓ 67.2M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
octokit/plugin-enterprise-server.js
Octokit plugin for GitHub Enterprise REST APIs
TypeScript★ 21↓ 5,390/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rvm/executable-hooks
No repository description published.
Ruby · Shell★ 21Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
sajya/client
JSON-RPC 2.0 HTTP(S) Client
PHP★ 21↓ 9,905/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
NuGet
25At Riskhealth index
space-wizards/SpaceWizards.HttpListener
Managed, maintained, updated, and unprofessionally butchered fork of System.Net.HttpListener
C#★ 21Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
spec-first/swagger_ui_bundle
bundled swagger-ui pip package
Python★ 21Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
31At Riskhealth index
stjohnjohnson/cucumber-junit
Cucumber.js JSON to JUnitXML converter
JavaScript★ 21↓ 203.3K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
—
24At Riskhealth index
synpse-hq/synpse
Synpse is an all-in-one solution to manage your servers and IoT devices providing declarative app deployment, SSH access and TCP tunnels
Mixed★ 21Oct 26, 2026
Apache-2.0Oct 26, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
tilezen/tapalcatl-py
A simpler, less configurable Python port of Tapalcatl suitable for AWS Lambda. Extracts vector tiles from ZIP metatiles stored on S3.
Python★ 21Oct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
yang-zhang/product_category
Product cateogry prediction
Python★ 21↓ 12/moOct 26, 2026
No licenseOct 26, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/assets
Assets management
PHP★ 21↓ 18.8K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/cookies
Convenient way to use cookies with PSR-7
PHP★ 21↓ 25.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/var-dumper
Helper for dumping variable for debug purposes
PHP★ 21↓ 47.3K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii-middleware
Yii-specific middleware
PHP★ 21↓ 9,727/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Akurganow/use-persisted-state
React useState hook with persistence to localStorage, sessionStorage, and extension storage (chrome.storage / browser.storage)
TypeScript · JavaScript★ 20↓ 2,193/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
CoderPuppy/os-browserify
No repository description published.
JavaScript★ 20↓ 37.5M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0