Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,728
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,411 recordsRanked by popularity · browse by tag · record statistics
PyPI
50Moderatehealth index
whatshap/whatshap
Read-based phasing of genomic variants, also called haplotype assembly
Python · C++★ 423Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
jarmo/require_all
A wonderfully simple way to load Ruby code
Ruby★ 420Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
HugoBlox/academic-file-converter
📚 Import Bibtex publications and Jupyter Notebook blog posts into your Markdown website or book. 将Bibtex转换为Markdown网站
Python · Jupyter Notebook★ 419Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
asweigart/PyGetWindow
A simple, cross-platform module for obtaining GUI information on applications' windows.
Python★ 419↓ 2.4M/moAug 24, 2026
BSD-3-ClauseAug 24, 2026 · metrics 2.10.0
Go
32At Riskhealth index
dsnet/compress
Collection of compression related Go packages.
Go★ 419Aug 29, 2026
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Go
20At Riskhealth index
tidwall/pretty
Efficient JSON beautifier and compactor for Go
Go★ 419Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
21At Riskhealth index
TooTallNate/node-bindings
Helper module for loading your native module's `.node` file
JavaScript★ 416↓ 110M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
SSheldon/rust-objc
Objective-C Runtime bindings and wrapper for Rust.
Rust★ 415↓ 2.7M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
23At Riskhealth index
ilammy/msvc-dev-cmd
GitHub Action to setup Developer Command Prompt for Microsoft Visual C++
JavaScript★ 411Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
npm
22At Riskhealth index
gajus/contents
Table of contents generator.
JavaScript★ 410↓ 16K/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
mjackson/citrus
Parsing Expressions for Ruby
Ruby★ 410Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
26At Riskhealth index
ooc-lang/rock
:ocean: self-hosted ooc compiler that generates c99
ooc · C★ 410Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
PyYoshi/cChardet
universal character encoding detector
Python · Cython★ 409↓ 8.2M/moAug 3, 2026
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
17Criticalhealth index
troygoode/node-require-directory
Recursively iterates over specified directory, requiring each file, and returning a nested hash structure containing those libraries.
JavaScript★ 409↓ 474M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
21At Riskhealth index
iancoleman/orderedmap
orderedmap is a golang map where the keys keep the order that they're added. It can be de/serialized from/to JSON. It's based closely on the python collections.OrderedDict.
Go★ 408Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
17Criticalhealth index
relevance/rcov
The new home of RCov on GitHub
Ruby★ 407Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
TypeScript★ 406↓ 183M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm · Go
48Weakhealth index
humpback/humpback
Lightweight platform for managing containerized services.
Vue · Go · TypeScript★ 405↓ 845/moAug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0
Go
27At Riskhealth index
nxadm/tail
[Revamped] Go package for reading from continuously updated files (tail -f)
Go★ 405Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
30At Riskhealth index
go-stack/stack
Package stack implements utilities to capture, manipulate, and format call stacks.
Go★ 404Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
bluss/maplit
Rust container / collection literal macros for HashMap, HashSet, BTreeMap, BTreeSet.
Rust★ 401↓ 5.5M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/resolve.exports
A tiny (952b), correct, general-purpose, and configurable `"exports"` and `"imports"` resolver without file-system reliance
TypeScript★ 400↓ 164M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
RubyGems
42Weakhealth index
ruby-rdf/rdf
RDF.rb is a pure-Ruby library for working with Resource Description Framework (RDF) data.
Ruby★ 400Jul 22, 2026
UnlicenseJul 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
backstage/mkdocs-monorepo-plugin
✚ Build multiple documentation folders in a single Mkdocs. Designed for large codebases.
Python · Shell★ 399↓ 1.9M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
npm
30At Riskhealth index
max-mapper/extract-zip
Zip extraction written in pure JavaScript. Extracts a zip into a directory.
JavaScript★ 399Aug 31, 2026
BSD-2-ClauseAug 31, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
box/flaky
Plugin for nose or pytest that automatically reruns flaky tests.
Python★ 398↓ 3.9M/moAug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
crates.io · PyPI
34At Riskhealth index
DeFiCh/ain
DeFi Blockchain - enabling decentralized finance on Bitcoin
C++ · Python★ 397↓ 1/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
allegro/typescript-strict-plugin
Typescript plugin that allows turning on strict mode in specific files or directories.
TypeScript★ 397↓ 1.1M/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Go
25At Riskhealth index
pkg/term
Package term manages POSIX terminals.
Go★ 397Aug 29, 2026
BSD-2-ClauseAug 29, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
TvoroG/pytest-lazy-fixture
It helps to use fixtures in pytest.mark.parametrize
Python★ 396↓ 687.2K/moAug 24, 2026
MITAug 24, 2026 · metrics 2.10.0