Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,632
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,575 recordsRanked by popularity · browse by tag · record statistics
npm
22At Riskhealth index
vba-blocks/vba-blocks
A package manager and build tool for VBA
VBA · TypeScript★ 65Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
23At Riskhealth index
xanzy/ssh-agent
Create a new SSH agent on any type of OS (so including Windows)
Go★ 65Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
—
30At Riskhealth index
JuliaServices/AutoHashEquals.jl
A Julia macro to add == and hash() to composite types.
Julia★ 64Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
Placekey/placekey-py
No repository description published.
Python★ 64↓ 87.4K/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
npm
19Criticalhealth index
ahmadnassri/node-har-validator
Extremely fast HTTP Archive (HAR) validator using JSON Schema
JavaScript★ 64↓ 49.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
browserup/browsermob-proxy-rb
Ruby client for the BrowserMob and BrowserUp Proxy.
Ruby★ 64Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Hex
22At Riskhealth index
dashbitco/nimble_ownership
Lightweight ownership of resources across processes
Elixir★ 64↓ 818.9K/moOct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
Hex
32At Riskhealth index
hissssst/repatch
Async-friendly Mocks and Patches in Elixir
Elixir★ 64↓ 5,306/moOct 25, 2026
Custom licenseOct 25, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
krisleech/wisper-rspec
RSpec matchers and stubbing for Wisper
Ruby★ 64Oct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
npm
11Criticalhealth index
lydell/urix
[DEPRECATED] Makes Windows-style paths more unix and URI friendly.
JavaScript★ 64↓ 37.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
14Criticalhealth index
mirage/functoria
A DSL to invoke otherworldly functors
OCaml★ 64Sep 11, 2026
ISCSep 11, 2026 · metrics 2.10.0
RubyGems
18Criticalhealth index
natalie-lang/natalie_parser
NatalieParser is a zero-dependency, from-scratch, hand-written recursive descent parser for the Ruby Programming Language.
C++ · Ruby★ 64Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Packagist · npm
19Criticalhealth index
oat-sa/tao-core
main extension of TAO
PHP · JavaScript★ 64↓ 1,484/moOct 22, 2026
GPL-2.0Oct 22, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
opal/opal-rspec
Opal + RSpec = ♥️
Ruby★ 64Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
polarsource/polar-python
Polar SDK for Python
Python★ 64Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
46Weakhealth index
pyupio/dparse
A parser for Python dependency files
Python★ 64↓ 3.3M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
Packagist · npm
60Moderatehealth index
silverstripe/silverstripe-subsites
Subsites module for Silverstripe CMS
PHP★ 64↓ 2,729/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
37Weakhealth index
sindresorhus/merge-streams
Merge multiple streams into a unified stream
JavaScript★ 64↓ 147M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
tomatophp/filament-translations
Manage your translation with DB and cache
PHP★ 64↓ 2,101/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Python · Jupyter Notebook★ 63↓ 1,072/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
17Criticalhealth index
DoctorMcKay/node-tf2
Simple module to interact with the TF2 game coordinator
JavaScript★ 63↓ 1,180/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
28At Riskhealth index
Fractions-DotNet/Fractions
A fraction data type to calculate with rational numbers.
C#★ 63Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
PoC-Consortium/engraver
PoCC Burstcoin Reference Plotter
Rust · C★ 63↓ 3/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
TritonDataCenter/node-asn1
Contains parsers and serializers for ASN.1 (currently BER only)
AGS Script · JavaScript · Makefile★ 63Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
berkshelf/solve
A constraint solver for Ruby
Ruby★ 63Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
40Weakhealth index
justjs/just
Essential utilities for all your javascript projects.
JavaScript★ 63↓ 75/moSep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
15Criticalhealth index
libp2p/go-libp2p-nat
NAT port mapping library for go-libp2p
Go★ 63Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
—
20At Riskhealth index
monochromegane/go-gitignore
A fast gitignore matching library for Go.
Go★ 63Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
13Criticalhealth index
n8n-io/localtunnel
exposes your localhost to the world
JavaScript★ 63↓ 55.9K/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
owenthereal/devise_uid
Add UID support to Devise.
Ruby★ 63Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0