Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,273
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,485 recordsRanked by popularity · browse by tag · record statistics
—
14Criticalhealth index
grosser/autotest-rails
No repository description published.
Ruby★ 11Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
Hex
32At Riskhealth index
growthbook/growthbook-elixir
GrowthBook SDK for Elixir
Elixir★ 11↓ 2,267/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
26At Riskhealth index
iVis-at-Bilkent/cose-base
Core module for compound spring embedder based layout styles
JavaScript★ 11↓ 102M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
17Criticalhealth index
indutny/offset-buffer
No repository description published.
JavaScript★ 11↓ 79.7M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
38Weakhealth index
isaacs/package-json-from-dist
No repository description published.
TypeScript★ 11↓ 304M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
26At Riskhealth index
jridgewell/resolve-uri
Resolve a URI relative to an optional base URI
JavaScript★ 11↓ 706M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
9Criticalhealth index
jsdom/w3c-hr-time
An implementation of the W3C High Resolution Time Level 2 specification.
Mixed★ 11Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
23At Riskhealth index
kfsm/pipe
process pipeline library
Erlang★ 11Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
—
23At Riskhealth index
kubero-dev/kubero-operator
An operator to run applications on Kubernetes like on Heroku
Makefile · Smarty · Shell★ 11Sep 29, 2026
GPL-3.0Sep 29, 2026 · metrics 2.10.0
Go
7Criticalhealth index
lasiar/canonicalheader
Golang linter checking the canonicality of the http header
Go★ 11Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
29At Riskhealth index
namberino/nimble
The NIMBLE Programming Language
C++★ 11Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
43Weakhealth index
nats-io/jwt.js
JWT tokens signed using nkeys for Ed25519 for the NATS JavaScript ecosystem
TypeScript★ 11↓ 179.3K/moSep 29, 2026
Apache-2.0Sep 29, 2026 · metrics 2.10.0
npm
45Weakhealth index
neofinancial/config-dug
Config loader with support for AWS Secrets Manager
TypeScript★ 11↓ 40.2K/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Hex
16Criticalhealth index
njonsson/structured_io
An Elixir API for consuming structured input streams
Elixir★ 11↓ 153/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
25At Riskhealth index
novemberborn/common-path-prefix
Computes the longest prefix string that is common to each path, excluding the base component
JavaScript★ 11↓ 49.6M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
olcf/wraprun
A flexible ALPS/Aprun task bundler
C · Python★ 11Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
oxc-project/oxc-miette
Forked version of miette
Rust★ 11↓ 862.6K/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
RubyGems
36Weakhealth index
package-url/packageurl-ruby
Ruby implementation of the package url spec
Ruby★ 11Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/kv
:electric_plug: RoadRunner Key-Value storage SDK
PHP★ 11↓ 303.4K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
18Criticalhealth index
rondoval/GoHeishaMon
Panasonic Aquarea H-series to MQTT gateway
Go★ 11Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
12Criticalhealth index
rxdi/core
This repository is archived and moved to Monorepo https://github.com/rxdi/rxdi-monorepo/tree/master/packages/core
TypeScript★ 11↓ 4,743/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
shibukawa/fm-index.jsx
FM-index is the fastest full text search algorithm using a compressed index file. This is FM-index for JSX/JS/AMD/Common.js.
JavaScript★ 11↓ 42/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
shikijs/vscode-textmate
Shiki's fork of `vscode-textmate`
TypeScript★ 11↓ 72.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
24At Riskhealth index
sigma-andex/purescript-morello
Cherry-picking 🍒 for your data
PureScript★ 11Sep 10, 2026
MIT-0Sep 10, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
sphinx-doc/sphinxcontrib-websupport
No repository description published.
Python · JavaScript★ 11↓ 861.7K/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
swagger-api/swagger-editor-cra
This is forked Create React App that builds SwaggerEditor@5
JavaScript★ 11Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
taiki-e/coverage-helper
[DEPRECATED] Helper for https://github.com/taiki-e/cargo-llvm-cov/issues/123.
Shell · Rust★ 11↓ 2,447/moOct 8, 2026
Apache-2.0Oct 8, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
tilde-lab/pycrystal
Utilities for ab initio modeling suite CRYSTAL, developed in Turin University
Python★ 11↓ 500/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0