Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,316
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,513 recordsRanked by popularity · browse by tag · record statistics
npm
25At Riskhealth index
calvinmetcalf/immediate
cross browser microtask
JavaScript★ 144↓ 221M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
—
16Criticalhealth index
intel/zlib
No repository description published.
C★ 144Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
RubyGems
27At Riskhealth index
pages-themes/dinky
Dinky is a Jekyll theme for GitHub Pages
SCSS · HTML · Ruby★ 144Sep 10, 2026
CC0-1.0Sep 10, 2026 · metrics 2.10.0
npm
19Criticalhealth index
webpack-contrib/null-loader
[DEPRECATED] A loader that returns an empty module (can still be used for webpack 4).
JavaScript★ 144↓ 7.8M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
25At Riskhealth index
Wikunia/ConstraintSolver.jl
ConstraintSolver in Julia: Blog posts ->
Julia★ 143Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
30At Riskhealth index
eggjs/mock
Mock library for egg testing.
TypeScript★ 143Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
26At Riskhealth index
Java★ 143Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
22At Riskhealth index
zeh/prando
Deterministic pseudo-random number generator for JavaScript and TypeScript
JavaScript · TypeScript★ 143↓ 206.6K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
NuGet
22At Riskhealth index
Polly-Contrib/Polly.Contrib.WaitAndRetry
Polly.Contrib.WaitAndRetry is an extension library for Polly containing helper methods for a variety of wait-and-retry strategies.
C#★ 142Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
—
19Criticalhealth index
XiaoMi/rdsn
Has been migrated to https://github.com/apache/incubator-pegasus/tree/master/rdsn
C++★ 142Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
containerbuildsystem/dockerfile-parse
Python library for parsing Dockerfile files.
Python★ 142↓ 12.5M/moSep 10, 2026
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
—
17Criticalhealth index
matrix-io/xc3sprog
xc3sprog is a suite of utilities for programming Xilinx FPGAs, CPLDs, and EEPROMs with the Xilinx Parallel Cable and other JTAG adapters under Linux. Used to program the FPGA of the MATRIX Creator/Voice via Raspberry Pi.
C++★ 142Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
RubyGems
11Criticalhealth index
sstephenson/ruby-ejs
EJS (Embedded JavaScript) template compiler for Ruby
Ruby★ 142Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
hitachienergy/epiphany
Cloud and on-premises automation for Kubernetes centered industrial grade solutions.
Python · Jinja★ 141Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
nette/tokenizer
[DISCONTINUED] Source code tokenizer
PHP★ 141↓ 48K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
plumphp/plum
Plum is a data processing pipeline for PHP.
PHP★ 141↓ 2,168/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
speechbrain/benchmarks
This repository contains the SpeechBrain Benchmarks
Python★ 141Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
Asana/php-asana
Official PHP client library for the Asana API v1
PHP★ 140↓ 20K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
18Criticalhealth index
ckeditor/ckeditor5-build-classic
The classic editor build of CKEditor 5.
HTML · JavaScript★ 140Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
22At Riskhealth index
fjc0k/taro-axios
在 Taro 中使用 axios。
TypeScript★ 140↓ 465/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
near/borsh-js
TypeScript/JavaScript implementation of Binary Object Representation Serializer for Hashing
JavaScript · TypeScript★ 140↓ 10.1M/moSep 22, 2026
Apache-2.0Sep 22, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
nikolaposa/version
♈ Value Object that represents a SemVer-compliant version number.
PHP★ 140↓ 573.6K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
31At Riskhealth index
tidwall/match
Simple string pattern matcher for Go
Go★ 140Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm · PyPI · crates.io +1
34At Riskhealth index
tree-sitter/tree-sitter-css
CSS grammar for Tree-sitter
JavaScript · C★ 140↓ 2.9M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Hex
23At Riskhealth index
zachallaun/mneme
Snapshot testing for Elixir
Elixir★ 140Oct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Electrostatics/apbs
Software for biomolecular electrostatics and solvation calculations
C · Python · MATLAB★ 139Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Fallen-Breath/PCRC
PyCraft based Replay Client
Python★ 139Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
auth0/node-samlp
SAML Protocol support for node (only IdP for now)
JavaScript★ 139↓ 102.3K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0