Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,180
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,867 recordsRanked by popularity · browse by tag · record statistics
Go · npm
13Criticalhealth index
alchemmist/lazy-tmux
Lazy tmux it is a fast session manager and saver for tmux. You can save all your session and lazy restore it.
Go★ 232Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
jbt/docker
Documentation generator
JavaScript · CSS★ 232↓ 17.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
ethereum/py_ecc
Python implementation of ECC pairing and bn_128 and bls12_381 curve operations
Python★ 231↓ 2.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
python-intelhex/intelhex
Python IntelHex library
Python★ 230↓ 3.9M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
17Criticalhealth index
tomatome/grdp
pure golang rdp protocol
Go★ 230Sep 20, 2026
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
ylogx/aesthetics
Image Aesthetics Toolkit - includes Fisher Vector implementation, AVA (Image Aesthetic Visual Analysis) dataset and fast multi-threaded downloader
Python★ 230Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
36Weakhealth index
zeromq/zeromq3-x
ØMQ/3.2 release branch - bug fixes only
C++★ 229Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
31At Riskhealth index
ajv-validator/ajv-formats
JSON Schema format validation for Ajv v8+
TypeScript★ 228↓ 484M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
bheisler/TinyTemplate
A small, lightweight template engine
Rust★ 226↓ 18.3M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
d3/d3-transition
Animated transitions for D3 selections.
JavaScript★ 226↓ 112M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
31At Riskhealth index
JuliaGraphics/Colors.jl
Color manipulation utilities for Julia
Julia★ 225Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
3Criticalhealth index
VisionVerse/Blind-Motion-Deblurring-Survey
Deep learning in motion deblurring: current status, benchmarks and future prospects[J], The Visual Computer, 2024.
Python · MATLAB★ 225Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
23At Riskhealth index
devplayer0/cvos
Bootable PDF CV
Shell · Assembly · Python★ 225Sep 17, 2026
GPL-3.0Sep 17, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
nickel-org/rust-mustache
mustache template library for rust
Rust★ 224↓ 155.2K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
jsverse/transloco-keys-manager
🦄 The Key to a Better Translation Experience
TypeScript · HTML★ 223↓ 185.5K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
OpenSLO/oslo
CLI tool for the OpenSLO spec
Go · Shell · Makefile★ 222Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
hyperium/mime
MIMEs in Rust
Rust★ 221↓ 43.7M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
7Criticalhealth index
0x4f53/Wristkey
A free and open-source 2FA app for smartwatches.
Kotlin★ 220Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
25At Riskhealth index
imdone/imdone-atom
imdone-atom has been archived
Mixed★ 220Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
brazanation/php-documents
Library to provide Brazilian Documents as Value Objects in PHP
PHP★ 219↓ 5,555/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
abonander/mime_guess
MIME type guessing of file extensions for Rust.
Rust★ 218↓ 19.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
36Weakhealth index
jupyterhub/helm-chart
A store of Helm chart tarballs for deploying JupyterHub and BinderHub on a Kubernetes cluster
Mixed★ 218Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm
41Weakhealth index
isaacs/yallist
Yet Another Linked List
TypeScript · JavaScript★ 217↓ 1.2B/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
41Weakhealth index
tj-actions/verify-changed-files
:octocat: Github action to verify file changes that occur during the workflow execution.
Shell★ 217Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
briansmith/untrusted
Safe, fast, zero-panic, zero-crashing, zero-allocation parsing of untrusted inputs in Rust.
Rust · Shell★ 216↓ 58.4M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
lebedov/msgpack-numpy
Serialize numpy arrays using msgpack
Python★ 215Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
grncdr/merge-stream
Merge multiple streams into one interleaved stream
JavaScript★ 212↓ 359M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
xdg-rs/dirs
a low-level library that provides config/cache/data paths, following the respective conventions on Linux, macOS and Windows
Rust★ 212↓ 15.8M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
22At Riskhealth index
gkz/type-check
a library which allows you to check the types of JavaScript values at runtime with a Haskell like type syntax
LiveScript★ 211↓ 527M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
25At Riskhealth index
jonschlinkert/word-wrap
Wrap words to a specified length.
JavaScript★ 210↓ 483M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0