Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,215
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,659 recordsRanked by popularity · browse by tag · record statistics
Packagist
29At Riskhealth index
antonioribeiro/random
Generate random strings or numeric values
PHP★ 70↓ 171.6K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
31At Riskhealth index
beacon-biosignals/Onda.jl
A Julia package for high-throughput manipulation of structured signal data across arbitrary domain-specific encodings, file formats and storage layers
Julia★ 70Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
17Criticalhealth index
deatil/lakego-admin-frontend
lakego-admin 后台管理系统前端项目,使用 Vite, Vue3, Ant-Design-Vue 开发
Vue · TypeScript★ 70Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
netdata/dashboard
Netdata Agent v1 Dashboard (deprecated)
JavaScript · TypeScript · HTML★ 70↓ 302/moSep 20, 2026
GPL-3.0Sep 20, 2026 · metrics 2.10.0
Go · PyPI
34At Riskhealth index
paraglider-project/paraglider
Streamlining cloud networking
Go★ 70Sep 22, 2026
Apache-2.0Sep 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/bootstrap5
Yii Framework Bootstrap 5 support
PHP★ 70↓ 8,583/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ambitioninc/django-dynamic-db-router
Run queries on any of your project's databases using a decorator or context manager.
Python★ 69↓ 15.3K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
jaredhanson/utils-merge
merge() utility function
JavaScript · Makefile★ 69↓ 237M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
murarth/assert_matches
Provides macro `assert_matches` for testing pattern matching
Rust★ 69↓ 3.8M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
17Criticalhealth index
rancher-archives/hypper
No repository description published.
Go★ 69Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
32At Riskhealth index
ConduitIO/bwlimit
Limit the bandwidth of a connection.
Go★ 66Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
allure-framework/allure-phpunit
Allure integrations for PHP test frameworks: PHPUnit
PHP★ 66↓ 213.2K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
gettext-rs/gettext-rs
GNU Gettext FFI binding for Rust
Rust★ 66↓ 365.2K/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
17Criticalhealth index
radicle-dev/radicle-contracts
Radicle contracts on Ethereum
Solidity · TypeScript★ 66Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io
22At Riskhealth index
alexcrichton/scoped-tls
Scoped Thread Local Storage for Rust
Rust★ 65↓ 11.8M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
asottile-archive/flake8-2020
flake8 plugin which checks for misuse of `sys.version` or `sys.version_info`
Python★ 65Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Hex
25At Riskhealth index
bitwalker/ex_unit_clustered_case
An extension for ExUnit for simplifying tests against a clustered application
Elixir★ 65↓ 331/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
deepset-ai/haystack-experimental
🧪 Experimental features for Haystack
Python★ 65↓ 307.9K/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
22At Riskhealth index
vba-blocks/vba-blocks
A package manager and build tool for VBA
VBA · TypeScript★ 65Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
30At Riskhealth index
JuliaServices/AutoHashEquals.jl
A Julia macro to add == and hash() to composite types.
Julia★ 64Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
37Weakhealth index
sindresorhus/merge-streams
Merge multiple streams into a unified stream
JavaScript★ 64↓ 147M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
28At Riskhealth index
Fractions-DotNet/Fractions
A fraction data type to calculate with rational numbers.
C#★ 63Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
40Weakhealth index
justjs/just
Essential utilities for all your javascript projects.
JavaScript★ 63↓ 75/moSep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
50Moderatehealth index
spdk/dpdk
SPDK mirror of DPDK
C★ 63Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
Packagist
12Criticalhealth index
Automattic/advanced-post-cache
All up in your WP_Query, caching the things.
PHP★ 62↓ 2/moSep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
coniks-sys/coniks-java
A CONIKS implementation in Java
Java★ 62Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
ferrilab/ferrilab
Experimenting with Rust's fundamental data model
Rust★ 62↓ 38.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0