Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,606
Monthly downloads under inspection
579B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,484 recordsRanked by popularity · browse by tag · record statistics
npm
14Criticalhealth index
greenify/msa
Modular BioJS compoment for a multiple sequence alignment
JavaScript★ 173Jul 17, 2026
BSL-1.0Jul 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
micromatch/to-regex-range
Pass two numbers, get a regex-compatible source string for matching ranges. Fast compiler, optimized regex, and validated against more than 2.78 million test assertions. Useful for creating regular expressions to validate numbers, ranges, years, etc.
JavaScript★ 173↓ 621M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
14Criticalhealth index
wilzbach/msa
Modular BioJS compoment for a multiple sequence alignment
JavaScript★ 173↓ 934/moJul 17, 2026
BSL-1.0Jul 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
your-tools/tbump
Bump software releases
Python★ 173Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 2.10.0
Go
36Weakhealth index
zhaoyunxing92/dingtalk
go版本的钉钉开发api
Go★ 173Sep 7, 2026
Apache-2.0Sep 7, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
FuelLabs/fuel-bridge
The canonical Fuel bridge mono repo.
TypeScript · Rust · Solidity★ 172↓ 4,643/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
19Criticalhealth index
ProtonMail/proton-calendar
Proton Calendar built with React.
TypeScript★ 172Jul 25, 2026
No licenseJul 25, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
beta-team/beta-recsys
Beta-RecSys: Build, Evaluate and Tune Automated Recommender Systems
Python★ 172↓ 124/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
RubyGems
41Weakhealth index
prawnpdf/pdf-inspector
A collection of PDF::Reader based analysis classes for inspecting PDF output. Mainly used for testing Prawn, but will work with any PDF.
Ruby★ 172Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
berkmancenter/namae
Namae (名前) parses personal names and splits them into their component parts.
Ruby · Gherkin★ 171Aug 21, 2026
No licenseAug 21, 2026 · metrics 2.10.0
npm
26At Riskhealth index
browserify/browser-pack
pack node-style source files from a json stream into a browser bundle
JavaScript★ 171↓ 5M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
RubyGems · npm
83Excellenthealth index
tdiary/tdiary-core
tDiary, The TSUKKOMI-able Weblog.
Ruby★ 171Jul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 2.10.0
npm
23At Riskhealth index
teambition/merge2
Merge multiple streams into one stream in sequence or parallel (~119M/month downloads).
JavaScript★ 171↓ 486M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
21At Riskhealth index
tonyhffong/Lint.jl
A lint tool for Julia code
Julia★ 171Jul 24, 2026
Custom licenseJul 24, 2026 · metrics 2.10.0
crates.io
50Moderatehealth index
trifectatechfoundation/bzip2-rs
libbz2 (bzip2 compression) bindings for Rust
C · HTML · Rust★ 171↓ 9.7M/moAug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
Michael-F-Bryan/mdbook-linkcheck
A backend for `mdbook` which will check your links for you.
Rust★ 170↓ 8,181/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
danielsdeleo/deep_merge
Recursive Merging for Ruby Hashes
Ruby★ 170Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
nirum/tableprint
Pretty console printing :clipboard: of tabular data in python :snake:
Python★ 170↓ 8,493/moAug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
npm
36Weakhealth index
thlorenz/convert-source-map
Converts a source-map from/to different formats.
JavaScript★ 170↓ 839M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
zhenhuaw-me/tflite2onnx
Convert TensorFlow Lite models (*.tflite) to ONNX.
Python★ 170↓ 8,345/moAug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
22At Riskhealth index
BaileyJM02/markdown-to-pdf
A GitHub Action to make PDF and HTML files from Markdown
CSS · JavaScript★ 169Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
npm
28At Riskhealth index
d3/d3-timer
An efficient queue for managing thousands of concurrent animations.
JavaScript★ 169↓ 310M/moAug 31, 2026
ISCAug 31, 2026 · metrics 2.10.0
npm
26At Riskhealth index
erasureprotocol/erasure-protocol
Information wants to be expensive
JavaScript · Solidity★ 169↓ 11/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
guzzle/guzzle_sphinx_theme
Sphinx theme used by Guzzle
HTML · CSS · Python★ 169↓ 35K/moAug 19, 2026
MITAug 19, 2026 · metrics 2.10.0
14Criticalhealth index
intenthq/icicle
A distributed, k-sortable unique ID generation system using Redis and Lua.
Java · Scala★ 169Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Maven
40Weakhealth index
qos-ch/reload4j
reload4j is a drop-in replacement for log4j 1.2.17
Java★ 169Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
rwf2/multer
An async parser for multipart/form-data content-type in Rust
Rust★ 169↓ 6.6M/moAug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
iroco-co/aioimaplib
Python asyncio IMAP4rev1 client library
Python★ 168Aug 8, 2026
GPL-3.0Aug 8, 2026 · metrics 2.10.0
Go
19Criticalhealth index
netdata/go.d.plugin
netdata go.d.plugin
Go★ 168Aug 16, 2026
GPL-3.0Aug 16, 2026 · metrics 2.10.0
npm
23At Riskhealth index
Bunlong/next-qrcode
React hooks for generating QRCode for your next React apps.
TypeScript · JavaScript · HTML★ 167↓ 299K/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0