Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,746
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,354 recordsRanked by popularity · browse by tag · record statistics
Packagist · npm
48Weakhealth index
mautic/plugin-grapesjs-builder
GrapesJS HTML and MJML integration for Mautic
PHP · JavaScript★ 57↓ 2,206/moSep 5, 2026
No licenseSep 5, 2026 · metrics 2.10.0
Go
15Criticalhealth index
mitchellh/go-testing-interface
Go (golang) library to expose *testing.T as an interface.
Go★ 57Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
27At Riskhealth index
thoughtbot/design-system
thoughtbot design system (tbds)
SCSS★ 57↓ 328/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
ElForastero/Transliterate
Транслитерация для Laravel
PHP★ 56↓ 3,605/moJul 29, 2026
MITJul 29, 2026 · metrics 2.10.0
npm
16Criticalhealth index
deathau/cm-show-whitespace-obsidian
A plugin for [Obsidian](https://obsidian.md) which shows whitespace in the editor.
TypeScript · SCSS · JavaScript★ 56Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
npm
21At Riskhealth index
isaacs/wrappy
Callback wrapping utility
JavaScript★ 56Jul 22, 2026
ISCJul 22, 2026 · metrics 2.10.0
Maven
14Criticalhealth index
javaee/javax.annotation
Repository for javax.annotation api
Java★ 56Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
laminas/laminas-text
Create FIGlets and text-based tables
PHP★ 56↓ 408.4K/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
14Criticalhealth index
masterfeizz/EDuke3D
Unofficial port of EDuke32 for the Nintendo 3DS
C★ 56Aug 22, 2026
GPL-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pytest-dev/pytest-runner
No repository description published.
Python★ 56Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
crates.io
15Criticalhealth index
servo/rust-azure
Rust bindings to mozilla-central's graphics abstraction layer
C++ · C★ 56Jul 19, 2026
MPL-2.0Jul 19, 2026 · metrics 2.10.0
Packagist · npm
71Goodhealth index
silverstripe/silverstripe-tagfield
Silverstripe module for editing tags (both in the CMS and other forms)
PHP · JavaScript★ 56↓ 29.1K/moJul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
stephenc/jcip-annotations
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
Java★ 56Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
22At Riskhealth index
stevenvachon/relateurl
Create a relative URL with options to minify.
JavaScript★ 56↓ 68.8M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
Maven · npm
18Criticalhealth index
vert-x3/vertx-web-site
Former vertx.io 3.x web-site, now archived. Instead use https://github.com/vertx-web-site/vertx-web-site
HTML★ 56Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Packagist
13Criticalhealth index
Azure/azure-storage-blob-php
This repo is used for releasing only, please go to https://github.com/azure/azure-storage-php for submitting issues or contribution.
PHP★ 55↓ 348.3K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
ahoward/lockfile
a ruby library for creating NFS safe lockfiles
Ruby★ 55Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
asahi417/kex
Kex is a python library for unsupervised keyword extraction from a document, providing an easy interface and benchmarks on 15 public datasets.
Python★ 55↓ 33/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
21At Riskhealth index
cmannett85/arg_router
C++ command line argument parsing and routing
C++★ 55Jul 25, 2026
BSL-1.0Jul 25, 2026 · metrics 2.10.0
RubyGems
37Weakhealth index
dryruby/sxp.rb
A universal S-expression parser for Ruby.
Ruby★ 55Jul 30, 2026
UnlicenseJul 30, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
frehberg/spa-rs
Solar Position Algorithm implementation in Rust
Rust★ 55↓ 215.4K/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
php-cache/array-adapter
[READ-ONLY] Array PSR-6 Cache pool
PHP★ 55↓ 69.2K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
turbolinks/turbolinks-rails
Rails engine for Turbolinks integration
Ruby★ 55Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
antw/iniparse
IniParse is a pure Ruby library for parsing INI configuration and data files.
Ruby★ 54Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
npm
28At Riskhealth index
timoxley/wcwidth
Port of C's wcwidth() and wcswidth()
JavaScript★ 54↓ 170M/moAug 23, 2026
Custom licenseAug 23, 2026 · metrics 2.10.0
crates.io
40Weakhealth index
zkat/supports-color
Detects whether a terminal supports color, and gives details about that support
Rust★ 54↓ 4.8M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
Packagist
23At Riskhealth index
Elendev/composer-push
Provide a `push` command to composer to push to repositories
PHP★ 53↓ 3,390/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
Gilnaa/globwalk
No repository description published.
Rust★ 53↓ 4.3M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0