Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,790
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,987 recordsRanked by popularity · browse by tag · record statistics
crates.io
30At Riskhealth index
rust-crdt/rust-crdt
a collection of well-tested, serializable CRDTs for Rust
Rust★ 1,545↓ 283.9K/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
watir/watir
Watir Powered By Selenium
Ruby★ 1,544Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
25At Riskhealth index
indutny/node-ip
IP address tools for node.js
JavaScript★ 1,543↓ 32.6M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nithinmurali/pygsheets
Google Sheets Python API v4
Python★ 1,543↓ 1.7M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
55Moderatehealth index
Teemu/pytest-sugar
a plugin for py.test that changes the default look and feel of py.test (e.g. progressbar, show tests that fail instantly)
Python★ 1,535↓ 6.8M/moOct 24, 2026
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
ryanto/acts_as_votable
Votable ActiveRecord for Rails
Ruby★ 1,528Sep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
Packagist
51Moderatehealth index
thephpleague/plates
Native PHP template system
PHP★ 1,528↓ 109.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
27At Riskhealth index
AriaMinaei/pretty-error
See node.js errors with less clutter
CoffeeScript★ 1,522↓ 56.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
13Criticalhealth index
composer/package-versions-deprecated
:package: Composer addon to efficiently get installed packages' version numbers
PHP★ 1,521↓ 1.9M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
mircokroon/minecraft-world-downloader
Download Minecraft worlds, extend server's render distance. 1.12.2 - 1.21
Java★ 1,521Sep 14, 2026
GPL-3.0Sep 14, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
peritus/bumpversion
Version-bump your software with a single command
Python★ 1,519↓ 755.2K/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
MarkBaker/PHPMatrix
PHP Class for handling Matrices
PHP★ 1,518↓ 13.1M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
rq/rq-scheduler
A lightweight library that adds job scheduling capabilities to RQ (Redis Queue)
Python★ 1,516↓ 489.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
gorilla/schema
Package gorilla/schema fills a struct with form values.
Go★ 1,515Sep 23, 2026
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
selwin/python-user-agents
A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
Python★ 1,514↓ 9.6M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
sigsep/open-unmix-pytorch
Open-Unmix - Music Source Separation for PyTorch
Python★ 1,505↓ 194.1K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
requests-cache/requests-cache
Persistent HTTP cache for python requests
Python★ 1,501↓ 7M/moSep 12, 2026
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
RubyGems
41Weakhealth index
steveklabnik/request_store
Per-request global storage for Rack.
Ruby★ 1,500Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
7Criticalhealth index
logrusorgru/aurora
Golang ultimate ANSI-colors that supports Printf/Sprintf methods
Go★ 1,495Sep 23, 2026
UnlicenseSep 23, 2026 · metrics 2.10.0
npm
23At Riskhealth index
ricmoo/aes-js
A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.
JavaScript★ 1,495↓ 14.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
scottie1984/swagger-ui-express
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
HTML · JavaScript★ 1,495↓ 17.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
facebookarchive/facebook-swift-sdk
Integrate your iOS apps in Swift with Facebook Platform.
Swift · Shell · Ruby★ 1,493Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
19Criticalhealth index
google/gofuzz
Fuzz testing for go.
Go★ 1,492Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
13Criticalhealth index
mitchellh/go-ps
Find, list, and inspect processes from Go (golang).
Go★ 1,490Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
brianmario/yajl-ruby
A streaming JSON parsing and encoding library for Ruby (C bindings to yajl)
C · Ruby★ 1,489Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
scalameta/scalafmt
Code formatter for Scala
Scala★ 1,489Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
erikrose/blessings
A thin, practical wrapper around terminal capabilities in Python
Python★ 1,488↓ 1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lidatong/dataclasses-json
Easily serialize Data Classes to and from JSON
Python★ 1,486↓ 55.4M/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
slack-notifier/slack-notifier
A simple wrapper for posting to slack channels
Ruby★ 1,486Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0