Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,719
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,580 recordsRanked by popularity · browse by tag · record statistics
RubyGems
37Weakhealth index
trailblazer/cells-rails
Rails support for Cells.
Ruby★ 54Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
NuGet · npm
19Criticalhealth index
vezel-dev/ruptura
A Windows DLL injection, function interception, and memory manipulation library for .NET.
C#★ 54Sep 15, 2026
0BSDSep 15, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
zkcrypto/merlin
Composable proof transcripts for public-coin arguments of knowledge
Rust★ 54↓ 1.9M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Packagist
23At Riskhealth index
Elendev/composer-push
Provide a `push` command to composer to push to repositories
PHP★ 53↓ 3,212/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
Gilnaa/globwalk
No repository description published.
Rust★ 53↓ 4.5M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
19Criticalhealth index
duckduckgo/BrowserServicesKit
No repository description published.
Swift★ 53Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
21At Riskhealth index
fhs/ZipFile.jl
Read/Write ZIP archives in Julia
Julia★ 53Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
—
12Criticalhealth index
foolip/mdn-bcd-collector
Data collection service for MDN's browser-compat-data
Mixed★ 53Sep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
googleapis/python-spanner-sqlalchemy
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/sqlalchemy-spanner
Python★ 53Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
leanprover/KLR
A formalization of ML kernel languages
C · Lean · C++★ 53↓ 26/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
lydell/resolve-url
[DEPRECATED] Like Node.js’ `path.resolve`/`url.resolve` for the browser.
JavaScript★ 53↓ 38M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
19Criticalhealth index
microsoft/eslint-plugin-sdl
ESLint Plugin focused on common security issues and misconfigurations.
JavaScript★ 53↓ 5.2M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
36Weakhealth index
spekt/nunit.testlogger
NUnit logger for vstest platform (<= v3.x)
C#★ 53Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Hex
35Weakhealth index
tlux/sftp_client
An Elixir SFTP Client that wraps Erlang's ssh and ssh_sftp.
Elixir★ 53↓ 39.4K/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
npm
38Weakhealth index
vadimdemedes/minimist-options
Clean and beautiful options for minimist
JavaScript · TypeScript★ 53↓ 57.1M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go · npm
16Criticalhealth index
JackDallas/Premiumizearr
Bridge your *Arr clients (Sonarr, Radarr) to your premiumize.me (upload/download manager)
Go · Svelte★ 52Oct 21, 2026
GPL-3.0Oct 21, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
MrPunyapal/PestStan
PhpStan support for Pest
PHP★ 52↓ 28.3K/moOct 26, 2026
MITOct 26, 2026 · metrics 2.10.0
Hex
20At Riskhealth index
Supersonido/rebar_mix
rebar3 plugin for building Elixir dependencies with mix
Erlang★ 52↓ 1,753/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
16Criticalhealth index
calipho-sib/sequence-viewer
neXtProt protein sequence viewer (javascript) - From SIB CALIPHO group; neXtProt project
JavaScript★ 52↓ 127/moOct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
Hex
33At Riskhealth index
elixir-nx/stb_image
A tiny image library using stb_image as the backend
Elixir · C★ 52Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
22At Riskhealth index
foliojs/tiny-inflate
A tiny inflate implementation
JavaScript★ 52Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
22At Riskhealth index
mjknowles/matrix-mcp-server
MCP Server for a Matrix home server integration; chat, manage rooms, etc.
TypeScript★ 52Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
rails/builder
Provide a simple way to create XML markup and data structures.
Ruby★ 52Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
26At Riskhealth index
rocketsciencegg/go-ts3
A golang TeamSpeak 3 ServerQuery client
Go★ 52Sep 20, 2026
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
rubycocos/markdown
markdown tools, libraries & scripts
JavaScript · Ruby★ 52Oct 20, 2026
CC0-1.0Oct 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
samsonjs/format
printf-like formatting for JavaScript
JavaScript★ 52↓ 56.6M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/p-each-series
Iterate over promises serially
JavaScript · TypeScript★ 52↓ 19.9M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0