Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,203
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,329 recordsRanked by popularity · browse by tag · record statistics
PyPI
10Criticalhealth index
PavanTatikonda/itypes
Basic immutable container types for Python.
Python★ 19↓ 1.2M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
33At Riskhealth index
alingse/asasalint
Golang linter, lint pass any slice as any in variadic function
Go★ 19Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
datafuse-extras/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Rust★ 19Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
20At Riskhealth index
datawire/teleproxy
No repository description published.
Go · Makefile★ 19Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
19Criticalhealth index
emilopezcano/SixSigma
SixSigma R package
R★ 19Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
kartik-v/yii2-widget-rangeinput
An enhanced Yii 2 widget encapsulating the HTML 5 range input (sub repo split from yii2-widgets)
PHP★ 19↓ 73.7K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
12Criticalhealth index
node-a-team/Cosmos-IE
Integrated Exporter for CosmosSDK
Go★ 19Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
octokit/oauth-authorization-url.js
Universal library to retrieve GitHub’s identity URL for the OAuth web flow
TypeScript · JavaScript★ 19↓ 27.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io · npm
19Criticalhealth index
paritytech/polkadot-bulletin-chain
The Bulletin Chain is a parachain providing distributed data storage and retrieval infrastructure for the Polkadot ecosystem.
Rust · TypeScript★ 19↓ 16.4K/moSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
rhinestonewtf/erc4337-validation
A library to validate the ERC-4337 rules within Foundry
Solidity★ 19↓ 3,398/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
sdispater/pytzdata
Official timezone database for Python.
Python★ 19↓ 12.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
solarwinds/appoptics-apm-go
AppOptics APM Instrumentation for Go
Go★ 19Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
25At Riskhealth index
cappyzawa/starlark.vim
vim plugin for starlark
Vim Script★ 18Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
crossterm-rs/crossterm-winapi
Crossterm Windows API Abstractions
Rust★ 18↓ 7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
15Criticalhealth index
cyclops-ui/templates
The Official Templates Repository of Cyclops
Smarty★ 18Sep 21, 2026
No licenseSep 21, 2026 · metrics 2.10.0
29At Riskhealth index
emqxarchive/emqx-exproto
The Multiple-Language extension plugin for Protocol access
Erlang★ 18Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
20At Riskhealth index
kwp-lab/vikadata-widget-docx-generator
根据docx模板,一键批量填充字段并合成新的word文档
TypeScript★ 18Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm · Maven
19Criticalhealth index
vaadin/vaadin-connect
A Vaadin Labs experiment with a secure stateless communication framework
Java · TypeScript★ 18↓ 144/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
30At Riskhealth index
wooorm/zwitch
Handle values based on a property
JavaScript · TypeScript★ 18↓ 178M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
32At Riskhealth index
MindscapeHQ/raygun4go
Go SDK for Raygun
Go★ 17Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
bnb-chain/revm
No repository description published.
Rust★ 17Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
25At Riskhealth index
capnfabs/grouse
A diff tool for Hugo static sites.
Go★ 17Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
element-hq/matrix-react-sdk
Matrix SDK for React Javascript
TypeScript★ 17↓ 27.3K/moSep 20, 2026
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
fniessink/next-action
Next-action: determine the next action to work on from a list of actions in a todo.txt file
Python · Gherkin★ 17Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
jonas-schievink/adler
Rust crate for computing Adler-32 checksums
Rust★ 17↓ 5.1M/moSep 18, 2026
0BSDSep 18, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
pytorch-tpu/transformers
🤗 Transformers: State-of-the-art Natural Language Processing for TensorFlow 2.0 and PyTorch.
Python★ 17Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
32At Riskhealth index
tree-sitter-grammars/tree-sitter-toml
TOML grammar for tree-sitter
JavaScript · C★ 17↓ 2.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0