Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,180
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,867 recordsRanked by popularity · browse by tag · record statistics
NuGet
11Criticalhealth index
VahidN/DNTPersianUtils.Core
DNTPersianUtils.Core is a collection of Persian helper extension methods
C#★ 276Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
scrapy-plugins/scrapy-deltafetch
Scrapy spider middleware to ignore requests to pages containing items seen in previous crawls
Python★ 275↓ 3,275/moSep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
npm
35Weakhealth index
sindresorhus/callsites
Get callsites from the V8 stack trace API
JavaScript · TypeScript★ 274↓ 586M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
43Weakhealth index
KokaKiwi/rust-hex
A basic crate to encode values to hexadecimal representation. Originally extracted from rustc-serialize.
Rust★ 272↓ 47.6M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
19Criticalhealth index
dart-archive/html
Dart port of html5lib. For parsing HTML/HTML5 with Dart. Works in the client and on the server.
Dart★ 272Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
Chi-teck/drupal-code-generator
A code generator for Drupal.
PHP★ 268↓ 1.1M/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
MetaMask/providers
An Ethereum Provider that connects over a stream, as injected into websites by MetaMask
TypeScript★ 268↓ 3.2M/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
37Weakhealth index
MrCMS/MrCMS
Mr CMS is an open source C# MVC CMS Framework
C# · JavaScript · CSS★ 267Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
bigdata-ustc/EduKTM
The Model Zoo of Knowledge Tracing Models
Python★ 265Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
32At Riskhealth index
jshttp/etag
Create simple HTTP ETags
JavaScript★ 265↓ 417M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
eclipse-tahu/tahu
Eclipse Tahu addresses the existence of legacy SCADA/DCS/ICS protocols and infrastructures and provides a much-needed definition of how best to apply MQTT into these existing industrial operational environments.
Java · C · C#★ 264Sep 19, 2026
EPL-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
nox/serde_urlencoded
x-www-form-urlencoded meets Serde
Rust★ 264↓ 41.5M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
polyfloyd/rust-id3
Moved to https://codeberg.org/polyfloyd/rust-id3
Rust★ 263↓ 416.9K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
octokit/webhooks
machine-readable, always up-to-date GitHub Webhooks specifications
TypeScript★ 261↓ 22.5M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
tokio-rs/tls
A collection of Tokio based TLS libraries.
Rust★ 261↓ 15.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
kornelski/http-cache-semantics
RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases
JavaScript★ 260↓ 186M/moSep 16, 2026
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
schodet/nxt-python
NXT-Python is a python driver/interface for the Lego Mindstorms NXT robot based on NXT_python.
Python★ 257Sep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
tokio-rs/valuable
No repository description published.
Rust★ 255↓ 23.1M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
5Criticalhealth index
VisionVerse/RemoteSensing-Restoration-Survey
[ISPRS 2026] Remote Sensing Image Dehazing: A Systematic Review of Progress, Challenges, and Prospects
Python★ 254Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
48Weakhealth index
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
JavaScript★ 250↓ 630M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
36Weakhealth index
sindresorhus/load-json-file
Read and parse a JSON file
JavaScript · TypeScript★ 250↓ 92.6M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
consta-design-system/uikit
No repository description published.
TypeScript · MDX★ 249Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
adaltas/node-hbase
Asynchronous HBase client for NodeJs using REST
CoffeeScript★ 244↓ 722/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
27At Riskhealth index
0xPolygon/zkevm-prover
zkEVM prover in C++
C++★ 242Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
15Criticalhealth index
Codeception/phpunit-wrapper
PHPUnit bridge for Codeception
PHP★ 239↓ 424.7K/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
16Criticalhealth index
electron/releases
📦 Complete and up-to-date info about every release of Electron
JavaScript★ 239Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
karthikv/purview
A server-side component framework. What if your React components ran on the server-side?
TypeScript★ 239↓ 274/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
5Criticalhealth index
VisionVerse/Awesome-RGBT
RGB-T Fusion, RGB-T SOD, RGB-T Vehicle Detection, RGB-T Crowd Counting, RGB-T Pedestrian Detection, RGB-T Semantic Segmeantaion, RGB-T Tracking
Mixed★ 237Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
40Weakhealth index
llogiq/bytecount
Counting occurrences of a given byte or UTF-8 characters in a slice of memory – fast
Rust★ 237↓ 10.7M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
28At Riskhealth index
input-output-hk/mantis
A Scala based client for Ethereum-like Blockchains.
Scala★ 234Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0