Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,551
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,203 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
logux/actions
Types and action creators for build-in Logux actions
TypeScript · JavaScript★ 11↓ 13.7K/moOct 3, 2026
MITOct 3, 2026 · metrics 2.10.0
npm
34At Riskhealth index
logux/oxc-configs
Oxlint & oxfmt shareable config for Logux
JavaScript★ 11↓ 4,636/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
29At Riskhealth index
namberino/nimble
The NIMBLE Programming Language
C++★ 11Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
43Weakhealth index
nats-io/jwt.js
JWT tokens signed using nkeys for Ed25519 for the NATS JavaScript ecosystem
TypeScript★ 11↓ 179.3K/moSep 29, 2026
Apache-2.0Sep 29, 2026 · metrics 2.10.0
npm
45Weakhealth index
neofinancial/config-dug
Config loader with support for AWS Secrets Manager
TypeScript★ 11↓ 40.2K/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Hex
16Criticalhealth index
njonsson/structured_io
An Elixir API for consuming structured input streams
Elixir★ 11↓ 153/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
25At Riskhealth index
novemberborn/common-path-prefix
Computes the longest prefix string that is common to each path, excluding the base component
JavaScript★ 11↓ 49.6M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
—
34At Riskhealth index
nspcc-dev/neofs-api
NeoFS API documentation and proto files declaration
Makefile★ 11Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
olcf/wraprun
A flexible ALPS/Aprun task bundler
C · Python★ 11Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
oxc-project/oxc-miette
Forked version of miette
Rust★ 11↓ 862.6K/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
pachca/openapi
OpenAPI spec, SDKs (TypeScript, Python, Go, Kotlin, Swift, C#), CLI, n8n node, and AI agent skills (MCP-ready) for Pachca API
TypeScript★ 11↓ 2,231/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
RubyGems
36Weakhealth index
package-url/packageurl-ruby
Ruby implementation of the package url spec
Ruby★ 11Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/kv
:electric_plug: RoadRunner Key-Value storage SDK
PHP★ 11↓ 303.4K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
18Criticalhealth index
rondoval/GoHeishaMon
Panasonic Aquarea H-series to MQTT gateway
Go★ 11Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
12Criticalhealth index
rxdi/core
This repository is archived and moved to Monorepo https://github.com/rxdi/rxdi-monorepo/tree/master/packages/core
TypeScript★ 11↓ 4,743/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
shibukawa/fm-index.jsx
FM-index is the fastest full text search algorithm using a compressed index file. This is FM-index for JSX/JS/AMD/Common.js.
JavaScript★ 11↓ 42/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
shikijs/vscode-textmate
Shiki's fork of `vscode-textmate`
TypeScript★ 11↓ 72.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
24At Riskhealth index
sigma-andex/purescript-morello
Cherry-picking 🍒 for your data
PureScript★ 11Sep 10, 2026
MIT-0Sep 10, 2026 · metrics 2.10.0
Go · crates.io
8Criticalhealth index
slavkiy/witgo
SDK wasm plugin in golang
Go★ 11Sep 29, 2026
GPL-3.0Sep 29, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
sphinx-doc/sphinxcontrib-websupport
No repository description published.
Python · JavaScript★ 11↓ 861.7K/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
swagger-api/swagger-editor-cra
This is forked Create React App that builds SwaggerEditor@5
JavaScript★ 11Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
taiki-e/coverage-helper
[DEPRECATED] Helper for https://github.com/taiki-e/cargo-llvm-cov/issues/123.
Shell · Rust★ 11↓ 2,447/moOct 8, 2026
Apache-2.0Oct 8, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
tilde-lab/pycrystal
Utilities for ab initio modeling suite CRYSTAL, developed in Turin University
Python★ 11↓ 500/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
26At Riskhealth index
unshiftio/requires-port
Check if a protocol requires a certain port number to be added to an URL.
JavaScript★ 11↓ 183M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
web-token/jwt-checker
[READ-ONLY] Checker component of the JWT Framework
PHP★ 11↓ 97.5K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
29At Riskhealth index
wooorm/comma-separated-tokens
Parse and stringify comma-separated tokens
JavaScript★ 11↓ 195M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
yiisoft/input-http
Provides Yii Hydrator attributes to get data from PSR-7 HTTP request and adds extra abilities to middlewares processed by Yii Middleware Dispatcher.
PHP★ 11↓ 18.9K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
20At Riskhealth index
yoavniran/html-dir-content
Tiny, dependency-free library to (recursively) iterate directory entries in the browser (html5 File System API)
JavaScript★ 11↓ 117.2K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0