Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,034
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,445 recordsRanked by popularity · browse by tag · record statistics
crates.io
20At Riskhealth index
bluss/maplit
Rust container / collection literal macros for HashMap, HashSet, BTreeMap, BTreeSet.
Rust★ 402↓ 6.4M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
27At Riskhealth index
feross/simple-get
Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines
JavaScript★ 402↓ 102M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
19Criticalhealth index
hegeldev/hegel-rust
Property-based testing for Rust, built on Hypothesis
Mixed★ 402Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm · crates.io · PyPI
48Weakhealth index
hkrn/nanoem
nanoem is an MMD (MikuMikuDance) compatible implementation and its like cross-platform application mainly built for macOS.
C · C++★ 402Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
npm
32At Riskhealth index
react-bootstrap/dom-helpers
tiny, extremely modular, DOM helper library for IE9+
TypeScript · JavaScript★ 402↓ 201M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
22At Riskhealth index
NVIDIA/data-science-stack
NVIDIA Data Science stack tools
Shell★ 401Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
31At Riskhealth index
JavaScript · CSS★ 400↓ 978/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
41Weakhealth index
ruby-rdf/rdf
RDF.rb is a pure-Ruby library for working with Resource Description Framework (RDF) data.
Ruby★ 400Sep 12, 2026
UnlicenseSep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
backstage/mkdocs-monorepo-plugin
✚ Build multiple documentation folders in a single Mkdocs. Designed for large codebases.
Python · Shell★ 399↓ 1.3M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
21At Riskhealth index
cloudspace/angular_devise
A small AngularJS Service to interact with Devise Authentication.
JavaScript★ 399Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
30At Riskhealth index
max-mapper/extract-zip
Zip extraction written in pure JavaScript. Extracts a zip into a directory.
JavaScript★ 399Oct 21, 2026
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
Go
40Weakhealth index
niklasfasching/go-org
Org mode parser with html & pretty printed org rendering. also shitty static site generator.
Go★ 399Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
crates.io · PyPI
34At Riskhealth index
DeFiCh/ain
DeFi Blockchain - enabling decentralized finance on Bitcoin
C++ · Python★ 397Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
allegro/typescript-strict-plugin
Typescript plugin that allows turning on strict mode in specific files or directories.
TypeScript★ 397↓ 1M/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
box/flaky
Plugin for nose or pytest that automatically reruns flaky tests.
Python★ 397↓ 2.7M/moOct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
19Criticalhealth index
microsoft/setup-msbuild
A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications.
TypeScript★ 397Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
25At Riskhealth index
pkg/term
Package term manages POSIX terminals.
Go★ 397Oct 21, 2026
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
TvoroG/pytest-lazy-fixture
It helps to use fixtures in pytest.mark.parametrize
Python★ 396↓ 403K/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Packagist
53Moderatehealth index
amphp/byte-stream
A non-blocking stream abstraction for PHP based on Amp.
PHP★ 396↓ 5.9M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
19Criticalhealth index
googleapis/python-dialogflow
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-dialogflow
Mixed★ 396Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
—
20At Riskhealth index
tweekmonster/braceless.vim
:snake: Text objects, folding, and more for Python and other indented languages.
Vim Script★ 396Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
Michael-F-Bryan/include_dir
The logical evolution of the include_str macro for embedding a directory tree into your binary.
Rust★ 395↓ 10.6M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
19Criticalhealth index
microsoft/RTVS
R Tools for Visual Studio.
C#★ 394Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
php-fig/http-message-util
No repository description published.
PHP★ 394↓ 4.4M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
orzih/mkdocs-with-pdf
Generate a single PDF file from MkDocs repository.
HTML★ 393Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI · npm · crates.io +1
57Moderatehealth index
tree-sitter/tree-sitter-c
C grammar for tree-sitter
JavaScript★ 393↓ 12.2M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
15Criticalhealth index
WL-Amigo/waifu2x-converter-cpp
waifu2x(original : https://github.com/nagadomi/waifu2x) re-implementation in C++ using OpenCV [NO LONGER UPDATED]
C++★ 392Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Hex
27At Riskhealth index
alfert/propcheck
Property based Testing for Elixir (based upon PropEr)
Elixir★ 392↓ 8,096/moSep 9, 2026
GPL-3.0Sep 9, 2026 · metrics 2.10.0
Go
42Weakhealth index
HumanSecurity/marshmallow
Marshmallow provides a flexible and performant JSON unmarshalling in Go. It specializes in dealing with unstructured struct - when some fields are known and some aren't, with zero performance overhead nor extra coding needed.
Go★ 391Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Lightning-Universe/stable-diffusion-deploy
Learn to serve Stable Diffusion models on cloud infrastructure at scale. This Lightning App shows load-balancing, orchestrating, pre-provisioning, dynamic batching, GPU-inference, micro-services working together via the Lightning Apps framework.
Python · TypeScript★ 391Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0