Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,739
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,357 recordsRanked by popularity · browse by tag · record statistics
RubyGems
32At Riskhealth index
cosmo0920/win32-api
A different, better variant of the Win32API Ruby library
C · Ruby · Dockerfile★ 60Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
Packagist · npm
50Moderatehealth index
imalhasaranga/PDFLib
A robust PHP library to manipulate PDFs using Ghostscript. Convert PDF to Images, Merge, Split, Encrypt, Watermark, Compress, and more with a simple fluent API.
PHP★ 60↓ 4,135/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
40Weakhealth index
jonschlinkert/fill-range
Fill in a range of numbers or letters, positive or negative, optionally passing an increment or multiplier to use.
JavaScript★ 60↓ 678M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
28At Riskhealth index
mainland/language-c-quote
No repository description published.
Haskell★ 60Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
32At Riskhealth index
rsyslog/libfastjson
a fast json library for C
C★ 60Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
NuGet
15Criticalhealth index
AvaloniaUtils/Material.Icons.Avalonia
Avalonia control for display material icons from Material.Icons: https://github.com/SKProCH/Material.Icons
C#★ 59Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
37Weakhealth index
Quantum-Flytrap/quantum-tensors
Quantum Tensors - NPM package for sparse matrix operations for quantum information and computing
TypeScript★ 59↓ 945/moAug 16, 2026
No licenseAug 16, 2026 · metrics 2.10.0
28At Riskhealth index
dcos/cosmos
Provides an API for the orderly, harmonious, and complete management of DC/OS service packages
Scala★ 59Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
diff-match-patch-python/diff-match-patch
Diff Match Patch is a high-performance library in multiple languages that manipulates plain text.
Python★ 59Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
14Criticalhealth index
emersion/basu
The sd-bus library, extracted from systemd
C★ 59Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
jugyo/notify
The notification function for many platforms.
Ruby★ 59Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
pyfisch/httpdate
HTTP date parsing and formatting
Rust★ 59↓ 37.9M/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
renegade-fi/ark-mpc
A framework for SPDZ-style maliciously-secure MPC.
Rust★ 59↓ 21/moAug 19, 2026
Apache-2.0Aug 19, 2026 · metrics 2.10.0
37Weakhealth index
JuliaGraphics/ColorVectorSpace.jl
Treat colors as if they are n-vectors for the purposes of arithmetic
Julia★ 58Aug 8, 2026
Custom licenseAug 8, 2026 · metrics 2.10.0
npm
23At Riskhealth index
ddycai/chord-transposer
Node library for transposing musical chords within text.
TypeScript★ 58↓ 2,339/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
19Criticalhealth index
googleapis/python-tasks
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-tasks
Mixed★ 58Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.10.0
npm · Maven · NuGet
29At Riskhealth index
lightningdevkit/ldk-garbagecollected
LDK Bindings for Garbage-Collected Languages
TypeScript · C★ 58↓ 2,779/moSep 1, 2026
Custom licenseSep 1, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
sepulworld/deadman-check
Monitoring companion for Nomad periodic jobs and Cron
Ruby★ 58Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
PyPI
59Moderatehealth index
ssec/sift
A visualization application for satellite imagery
Python★ 58Jul 31, 2026
GPL-3.0Jul 31, 2026 · metrics 2.10.0
Packagist · PyPI
34At Riskhealth index
FriendsOfCake/crud-json-api
Build advanced JSON API Servers with almost no code.
PHP★ 57↓ 2,864/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
Lucretiel/autocommand
Autocommand turns a python function into a CLI program
Python★ 57↓ 1.5M/moAug 22, 2026
LGPL-3.0Aug 22, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
SSheldon/rust-block
Rust interface for Apple's C language extension of blocks.
Rust★ 57↓ 2.6M/moAug 22, 2026
No licenseAug 22, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
ThomasWaldmann/argparse
python argparse, pypi version (moved from google code)
Python★ 57↓ 19.9M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
aspect-archives/toolchains_protoc
Pre-built protoc binary toolchain for Bazel, fetched from official protobuf releases
Starlark★ 57Sep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Packagist
35Weakhealth index
clue/reactphp-sqlite
Async SQLite database, lightweight non-blocking process wrapper around file-based database extension (ext-sqlite3), built on top of ReactPHP.
PHP★ 57↓ 1,188/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
14Criticalhealth index
datasets-br/city-codes
Brazilian city names and official codes, IBGE, LexML and others
PLpgSQL · PHP · HTML★ 57Jul 29, 2026
No licenseJul 29, 2026 · metrics 2.10.0
Maven
11Criticalhealth index
gleclaire/findbugs-maven-plugin
Maven Mojo Plug-In to generate reports based on the FindBugs Analyzer
HTML · Groovy★ 57Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
npm
24At Riskhealth index
jbgutierrez/path-parse
Node.js path.parse() ponyfill
JavaScript★ 57↓ 553M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0