Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,415
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,541 recordsRanked by popularity · browse by tag · record statistics
npm
31At Riskhealth index
Yoast/yoast-components
Accessible React components by Yoast
JavaScript★ 22Oct 18, 2026
GPL-3.0Oct 18, 2026 · metrics 2.10.0
—
19Criticalhealth index
alexandre-abrioux/golem-node
Dockerized Golem Network Provider Node
Dockerfile · Makefile · HCL★ 22Oct 9, 2026
MITOct 9, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
amphp/phpunit-util
Helper package to ease testing with PHPUnit.
PHP★ 22↓ 27K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
33At Riskhealth index
blizzy78/varnamelen
Go analyzer checking that the length of a variable's name matches its usage scope
Go★ 22Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
16Criticalhealth index
blocktree/go-owcrypt
openwallet supported crypto library
Go★ 22Sep 29, 2026
No licenseSep 29, 2026 · metrics 2.10.0
Go
19Criticalhealth index
celestiaorg/celestia-openrpc
OpenRPC client of celestia-node, without dependencies on celestia-node/celestia-app/cosmos-sdk.
Go★ 22Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
25At Riskhealth index
css-modules/icss-utils
Search & replace tokens during the linking stage of ICSS loading
JavaScript★ 22↓ 106M/moOct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
dk1a/solidity-stringutils
StrSlice & Slice library for Solidity
Solidity★ 22↓ 90/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
e2/ruby_dep
Automatically helps determine supported Rubies based on .travis.yml file
Ruby★ 22Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
31At Riskhealth index
flash-oss/aba-generator
Generate Australian banking ABA file
JavaScript★ 22↓ 18K/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Maven
31At Riskhealth index
goto1134/structurizr-d2-exporter
Export structurizr views to D2 diagrams
D2 · Kotlin · ASL★ 22Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
hughsk/is-typedarray
Detect whether or not an object is a Typed Array
JavaScript★ 22↓ 127M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
15Criticalhealth index
JavaScript · TypeScript★ 22↓ 16.9K/moSep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
—
9Criticalhealth index
jsdom/domexception
An implementation of the DOMException class from browsers
Mixed★ 22Oct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
36Weakhealth index
jsdom/w3c-xmlserializer
An XML serializer that follows the W3C specification.
JavaScript★ 22↓ 318M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
koic/rubocop-faker
A RuboCop extension for Faker.
Ruby★ 22Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
—
22At Riskhealth index
lingfeiwang/findr
Fast Inference of Networks from Directed Regulations
C★ 22Oct 18, 2026
AGPL-3.0Oct 18, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
mathieuprog/tz_extra
A few utilities to work with time zones in Elixir
Elixir★ 22↓ 27.5K/moOct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm
22At Riskhealth index
mattdsteele/java-properties
Node module to read and interpolate Java .properties files
TypeScript★ 22↓ 12.8M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
minrk/asyncio-atexit
atexit, but for asyncio
Python★ 22↓ 1.7M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Hex
23At Riskhealth index
mirego/plug_image_processing
Endpoint to process images within your Plug application, compatible with imaginary API
Elixir★ 22↓ 1,750/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
36Weakhealth index
moby/locker
This is a direct pull from https://github.com/moby/moby/tree/master/pkg/locker
Go★ 22Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
nervosnetwork/mercury
Building on top of ckb-indexer, Mercury provides handy integration features for Nervos CKB.
Rust★ 22Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
niklastreml/gitlab-tui
A terminal based UI for interacting with your gitlab issues and merge requests
Rust★ 22↓ 13/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven · npm
26At Riskhealth index
oerpub/Aloha-Editor
OERPUB Aloha Editor is a repo for the development of Aloha plugins, models, tests, and examples for use in the production of books and open educational resources. We intend to commit all code back to Aloha when plugins reach maturity.
JavaScript · HTML★ 22Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
omnilib/sphinx-mdinclude
Markdown extension for Sphinx
Python★ 22↓ 485.2K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
16Criticalhealth index
oncojs/lolliplot
Chart to aid in understanding mutations and their location on a gene.
Mixed★ 22↓ 12/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
piotrmurach/tty-which
Cross-platform implementation of Unix `which` command
Ruby★ 22Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0