Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,022
Monthly downloads under inspection
651B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,444 recordsRanked by popularity · browse by tag · record statistics
Hex
22At Riskhealth index
proger/eflame
Flame Graph profiler for Erlang
Perl · Erlang★ 428↓ 7,940/moSep 11, 2026
ISCSep 11, 2026 · metrics 2.10.0
npm
17Criticalhealth index
tj/node-delegates
Nodejs method and accessor delegation utility
JavaScript★ 428Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
25At Riskhealth index
Rich-Harris/estree-walker
Traverse an ESTree-compliant AST
JavaScript★ 427↓ 660M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
30At Riskhealth index
d3/d3-color
Color spaces! RGB, HSL, Cubehelix, CIELAB, and more.
JavaScript★ 427↓ 342M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
mnooner256/pyqrcode
Python 3 module to generate QR Codes
Python★ 427↓ 647.8K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
justinsalamon/scaper
A library for soundscape synthesis and augmentation
Python★ 426↓ 680/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
—
24At Riskhealth index
mgutz/ansi
Small, fast library to create ANSI colored strings and codes. [go, golang]
Go★ 426Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
tilezen/joerd
Joerd can be used to download, merge and generate tiles from digital elevation data
Python · QML★ 426Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Go
25At Riskhealth index
go-chi/cors
CORS net/http middleware for Go
Go★ 425Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
mimemagicrb/mimemagic
Mime type detection in ruby via file extension or file content
Ruby★ 425Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
mirego/activerecord_json_validator
🔩 ActiveRecord::JSONValidator makes it easy to validate JSON attributes against a JSON schema.
Ruby★ 425Sep 11, 2026
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
PyPI · crates.io · npm +3
29At Riskhealth index
anyascii/anyascii
Unicode to ASCII transliteration - C Elixir Go Java JS Julia PHP Python Ruby Rust Shell .NET
Kotlin · Java★ 424↓ 5.1M/moSep 9, 2026
ISCSep 9, 2026 · metrics 2.10.0
Go
25At Riskhealth index
go-playground/universal-translator
:speech_balloon: i18n Translator for Go/Golang using CLDR data + pluralization rules
Go★ 424Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
—
23At Riskhealth index
leahneukirchen/bacon
a small RSpec clone
Ruby★ 424Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
—
23At Riskhealth index
opengm/opengm
A C++ Library for Discrete Graphical Models
C++ · Jupyter Notebook★ 424Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
papertrail/papertrail-cli
Command-line client for Papertrail hosted syslog & app log management service
Ruby★ 424Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
18Criticalhealth index
yaourdt/mgos-to-tasmota
A minimal firmware for OTA (over the air) flashing Tasmota, HAA, or ESPurna from Mongoose OS or compatible firmware types.
Python · C★ 424Sep 15, 2026
GPL-3.0Sep 15, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
asweigart/PyGetWindow
A simple, cross-platform module for obtaining GUI information on applications' windows.
Python★ 422↓ 2.4M/moOct 23, 2026
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ipfs/ipget
Retrieve files with IPFS + Amino DHT and save them locally.
Shell · Go★ 422Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
PyPI · npm · crates.io +1
34At Riskhealth index
tree-sitter/tree-sitter-go
Go grammar for tree-sitter
JavaScript★ 422↓ 13.5M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
Go
35Weakhealth index
jmhodges/levigo
levigo is a Go wrapper for LevelDB
Go★ 421Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
CocoaPods/Molinillo
A generic dependency resolution algorithm.
Ruby★ 420Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
jarmo/require_all
A wonderfully simple way to load Ruby code
Ruby★ 420Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
22At Riskhealth index
dsnet/compress
Collection of compression related Go packages.
Go★ 419Oct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
PyPI
46Weakhealth index
HugoBlox/academic-file-converter
📚 Import Bibtex publications and Jupyter Notebook blog posts into your Markdown website or book. 将Bibtex转换为Markdown网站
Python · Jupyter Notebook★ 418Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
20At Riskhealth index
tidwall/pretty
Efficient JSON beautifier and compactor for Go
Go★ 418Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
21At Riskhealth index
TooTallNate/node-bindings
Helper module for loading your native module's `.node` file
JavaScript★ 417↓ 117M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
22At Riskhealth index
heineiuo/isomorphic-ws
Isomorphic implementation of WebSocket (https://www.npmjs.com/package/ws)
JavaScript★ 417↓ 68.9M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
14Criticalhealth index
nu7hatch/gouuid
Go binding for libuuid
Go★ 417Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0