Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,316
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,512 recordsRanked by popularity · browse by tag · record statistics
Go
17Criticalhealth index
AlecRandazzo/Packrat
Live system forensic collector
Go★ 16Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
Codeception/base
Base Codeception distribution with minimal set of dependencies (excluding WebDriver and Guzzle)
PHP★ 16↓ 13.8K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
7Criticalhealth index
Guzzle3/common
[Guzzle 3] [READ-ONLY] Subtree split of the Guzzle\Common component. Provides generic classes for common use cases.
PHP★ 16↓ 45.5K/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Hex
26At Riskhealth index
Joraeuw/ex_nudge
No repository description published.
Elixir★ 16↓ 12.5K/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
—
16Criticalhealth index
JuliaGPU/CUDAapi.jl
Reusable components for CUDA API development.
Julia★ 16Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
SC-Networks/deepl-api-connector
Connector library for deepl.com rest translation api
PHP★ 16↓ 6,615/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
Vendic/hyva-checkout-create-account
Add a create account option to the Hyvä checkout for Magento 2
PHP · HTML★ 16↓ 3,110/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
41Weakhealth index
alexbrazier/simple-update-notifier
Simple update notifier to check for npm updates for cli applications
TypeScript★ 16↓ 56.3M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
24At Riskhealth index
alloy/mocha-on-bacon
Because it's yummy!
Ruby★ 16Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
andhus/scantree
Flexible recursive directory iterator: `scandir` meets `glob("**", recursive=True)`
Python★ 16↓ 6.4M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
10Criticalhealth index
basho/erlcloud
Cloud Computing library for erlang (Amazon EC2, S3, SQS, SimpleDB, Mechanical Turk, ELB)
Erlang★ 16Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
calebdw/larastan
⚗️ Adds code analysis to Laravel improving developer productivity and code quality.
PHP★ 16↓ 11.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
chef/chefstyle
Version Pinned RuboCop with Chef approved Cop list for linting software - NOT FOR COOKBOOKS
Ruby★ 16Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
29At Riskhealth index
commitdev/zero-aws-eks-stack
zero module for a basic AWS kubernetes stack on EKS
HCL · Shell★ 16Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
23At Riskhealth index
cspotcode/node-source-map-support
Adds source map support to node.js (for stack traces)
JavaScript★ 16↓ 211M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
24At Riskhealth index
davidmz/go-pageant
Package pageant provides an interface to PyTTY pageant.exe utility.
Go★ 16Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
20At Riskhealth index
desandro/get-style-property
quick & dirty CSS property testing
JavaScript★ 16↓ 19.9K/moOct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
doudou/flexmock
Flexible mocking for Ruby testing
Ruby★ 16Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dusk-network/microkelvin
No repository description published.
Rust★ 16↓ 3,077/moSep 23, 2026
MPL-2.0Sep 23, 2026 · metrics 2.10.0
Hex
48Weakhealth index
elixir-gettext/expo
Low-level Elixir parser for GNU Gettext files (PO, POT, MO).
Elixir★ 16↓ 1.2M/moOct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
firedrakeproject/tsfc
(ARCHIVED) Two-stage form compiler
Python★ 16Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
20At Riskhealth index
foliojs/codepoints
A parser for files in the Unicode database
JavaScript★ 16Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Hex
32At Riskhealth index
gleam-lang/regexp
📇 Regular expressions in Gleam!
Gleam · JavaScript · Erlang★ 16↓ 51.3K/moOct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
Go
25At Riskhealth index
gotify/plugin-api
The Plugin-API supported by gotify/server.
Go · Makefile★ 16Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
hawkw/matchers
No repository description published.
Rust★ 16↓ 39.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
kairos-io/kairos-init
:seedling: Kairos init will transform a normal docker image into a Kairos flavored one
Go★ 16Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
—
32At Riskhealth index
luxonis/depthai-shared
DepthAI Shared code and data
C++★ 16Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0