Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,059
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,007 recordsRanked by popularity · browse by tag · record statistics
npm
20At Riskhealth index
kylewetton/image-compare-viewer
Compare before and after images, for grading and other retouching for instance. Vanilla JS, zero dependencies.
JavaScript · SCSS★ 590↓ 16.2K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
20At Riskhealth index
rain1017/memdb
Distributed Transactional In-Memory Database (全球首个支持分布式事务的MongoDB)
JavaScript★ 590↓ 80/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
35Weakhealth index
thomcc/rust-typed-arena
The arena, a fast but limited type of allocator
Rust★ 590Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
NuGet
28At Riskhealth index
GowenGit/docnet
DocNET is as fast PDF editing and reading library for modern .NET applications
C#★ 588Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · PyPI
40Weakhealth index
AugurProject/augur-core
Augur v1 - Smart Contracts [DEPRECATED]
TypeScript · Python · Solidity★ 587↓ 2,618/moSep 22, 2026
GPL-3.0Sep 22, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
Misterio77/flavours
🎨💧 An easy to use base16 scheme manager that integrates with any workflow.
Rust★ 587↓ 72/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
54Moderatehealth index
povils/phpmnd
PHP Magic Number Detector
PHP★ 586↓ 129.5K/moOct 3, 2026
MITOct 3, 2026 · metrics 2.10.0
Hex
36Weakhealth index
mojotech/scrivener_ecto
Paginate your Ecto queries with Scrivener
Elixir★ 585↓ 133.4K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
ankushshah89/python-docx2txt
A pure python based utility to extract text and images from docx files.
Python★ 583↓ 3.9M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
Go
36Weakhealth index
flynn/noise
Go implementation of the Noise Protocol Framework
Go★ 583Sep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
PyPI · crates.io
46Weakhealth index
huggingface/hf_transfer
No repository description published.
Rust★ 583↓ 3.6M/moOct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
32At Riskhealth index
TNK-Studio/lazykube
⎈ The lazier way to manage kubernetes.
Go★ 582Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
http-interop/http-factory-guzzle
HTTP factory implemented for Guzzle PSR7
PHP★ 581↓ 3M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
14Criticalhealth index
HewlettPackard/cacti
An integrated cache and memory access time, cycle time, area, leakage, and dynamic power model
C++★ 580Oct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
mhfs/sidekiq-failures
Keep track of Sidekiq failed jobs
Ruby · HTML★ 580Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
23At Riskhealth index
plangrid/react-file-viewer
No repository description published.
JavaScript★ 580↓ 57.9K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-random/getrandom
A small cross-platform library for retrieving random data from (operating) system source
Rust★ 580↓ 187M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
16Criticalhealth index
tmc/grpc-websocket-proxy
A proxy to transparently upgrade grpc-gateway streaming endpoints to use websockets
Go★ 579Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
10Criticalhealth index
DeathKing/hit-oslab
哈尔滨工业大学《操作系统》课程实验指导手册、实验环境(64位支持)及源码。
Python · Shell · C★ 577Sep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
mozman/svgwrite
Python Package to write SVG files (UNMAINTAINED)
Python · HTML★ 577↓ 2.1M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
rust-threadpool/rust-threadpool
A very simple thread pool for parallel task execution
Rust★ 577↓ 6.3M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
vitejs/vite-plugin-vue2
Vite plugin for Vue 2.7
TypeScript · Vue★ 577↓ 1.1M/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
22At Riskhealth index
max-mapper/concat-stream
writable stream that concatenates strings or data and calls a callback with the result
JavaScript★ 575Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
prisma/quaint
SQL Query AST and Visitor for Rust
Rust★ 575↓ 172/moSep 24, 2026
Apache-2.0Sep 24, 2026 · metrics 2.10.0
NuGet
30At Riskhealth index
vknet/vk
Vkontakte API for .NET
C#★ 575Oct 15, 2026
MITOct 15, 2026 · metrics 2.10.0
npm
29At Riskhealth index
airbnb/babel-plugin-dynamic-import-node
Babel plugin to transpile import() to a deferred require(), for node
JavaScript★ 574↓ 21.5M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
prescottprue/redux-firestore
Redux bindings for Firestore
JavaScript★ 574↓ 25.2K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
RubyGems
48Weakhealth index
rake-compiler/rake-compiler
Provide a standard and simplified way to build and package Ruby C and Java extensions using Rake as glue.
Ruby★ 574Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
19Criticalhealth index
haskell/ghcide
A library for building Haskell IDE tooling
Haskell★ 573Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
55Moderatehealth index
nytimes/react-prosemirror
A library for safely integrating ProseMirror and React.
TypeScript★ 573Sep 29, 2026
Custom licenseSep 29, 2026 · metrics 2.10.0