Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,728
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,360 recordsRanked by popularity · browse by tag · record statistics
PyPI
22At Riskhealth index
catern/supervise
A minimal unprivileged process supervisor making use of modern Linux features
Python · C★ 71Aug 14, 2026
Custom licenseAug 14, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
coronabytes/dotnet-arangodb
.NET Driver for ArangoDB
C#★ 71Aug 2, 2026
Apache-2.0Aug 2, 2026 · metrics 2.10.0
19Criticalhealth index
mapbox/geojson.hpp
A C++14 library for converting GeoJSON into geometry.hpp representation
C++★ 71Jul 16, 2026
ISCJul 16, 2026 · metrics 2.10.0
npm · crates.io
23At Riskhealth index
osmosis-labs/mesh-security
No repository description published.
Rust★ 71↓ 12/moAug 15, 2026
Custom licenseAug 15, 2026 · metrics 2.10.0
crates.io
15Criticalhealth index
paritytech/nohash-hasher
An implementation of `std :: hash :: Hasher` which does not hash at all.
Rust★ 71↓ 6.5M/moAug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
rohe/pyoidc
A complete OpenID Connect implementation in Python
Python★ 71Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/fiat
Spinnaker auth service
Java · Groovy · Kotlin★ 71Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
NuGet
20At Riskhealth index
HTMLElements/smart-blazor
Blazor UI Components & Examples
HTML★ 70Aug 8, 2026
No licenseAug 8, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
antonioribeiro/random
Generate random strings or numeric values
PHP★ 70↓ 154.1K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
31At Riskhealth index
beacon-biosignals/Onda.jl
A Julia package for high-throughput manipulation of structured signal data across arbitrary domain-specific encodings, file formats and storage layers
Julia★ 70Aug 16, 2026
Custom licenseAug 16, 2026 · metrics 2.10.0
npm
23At Riskhealth index
boopathi/babel-minify
:rotating_light: Project is Discontinued and I'm contributing here -
JavaScript★ 70↓ 1,311/moJul 28, 2026
No licenseJul 28, 2026 · metrics 2.10.0
npm
30At Riskhealth index
deoxxa/duplexer2
Like duplexer (http://npm.im/duplexer) but using streams2
JavaScript★ 70↓ 98.8M/moAug 31, 2026
Custom licenseAug 31, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
miladrahimi/php-jwt
A PHP implementation of JWT (JSON Web Token) generator, parser, verifier, and validator.
PHP★ 70↓ 4,343/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
npm
14Criticalhealth index
3dmind/jest-sonar-reporter
A Sonar test reporter for Jest.
JavaScript★ 69↓ 2.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
26At Riskhealth index
NStefan002/2048.nvim
Play 2048 inside your favourite editor
Lua★ 69Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
npm
32At Riskhealth index
ViacomInc/data-point
JavaScript Utility for collecting, processing and transforming data
JavaScript★ 69↓ 1,083/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
apigee/terraform-modules
Terraform modules and ready to use end-to-end examples for Apigee.
HCL · Python★ 69Aug 17, 2026
Apache-2.0Aug 17, 2026 · metrics 2.10.0
npm
17Criticalhealth index
didilinkin/elf-taro
Taro 小程序 脚手架 (Taro 3 + Dva + Typescript + Immer) - 内置 Redux 计数器, 异步数据请求 与 腾讯小程序地图 demo
TypeScript · JavaScript★ 69Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
npm
26At Riskhealth index
jaredhanson/utils-merge
merge() utility function
JavaScript · Makefile★ 69↓ 230M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
murarth/assert_matches
Provides macro `assert_matches` for testing pattern matching
Rust★ 69↓ 3.5M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Go · PyPI
34At Riskhealth index
paraglider-project/paraglider
Streamlining cloud networking
Go★ 69Aug 10, 2026
Apache-2.0Aug 10, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
rsalmei/about-time
A cool helper for tracking time and throughput of code blocks, with beautiful human friendly renditions.
Python★ 69Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
npm
16Criticalhealth index
shibukawa/oktavia
Full text search engine for JS environments
JavaScript★ 69Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
54Moderatehealth index
ROCm/hipSPARSE
[DEPRECATED] Moved to ROCm/rocm-libraries repo
C++ · C★ 68Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
23At Riskhealth index
UCLOrengoGroup/cath-tools
Protein structure comparison tools such as SSAP and SNAP
C++ · Promela★ 68Sep 8, 2026
GPL-3.0Sep 8, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
altinity/altinity-dashboard
Altinity Dashboard helps you manage ClickHouse installations controlled by clickhouse-operator.
TypeScript · Go★ 68Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
microstates/ember
@microstates/ember - Official Microstates bindings for Ember.js
JavaScript · HTML · CSS★ 68↓ 132/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
npm
41Weakhealth index
mixmaxhq/search-string
Another simple parser for advanced search query syntax.
TypeScript★ 68↓ 47.5K/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
Go
32At Riskhealth index
otterize/credentials-operator
Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud
Go★ 68Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0