Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,179
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,355 recordsRanked by popularity · browse by tag · record statistics
14Criticalhealth index
arilamstein/choroplethrCaCensusTract
Shapefile, metadata and visualization functions for US Census Tracts in California
R★ 4Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
astroport-fi/terra-plus
Production Quality contracts under open source licenses
Rust★ 4Sep 17, 2026
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
barryvdh/laravel
A PHP Framework For Web Artisans
PHP★ 4Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
bigeasy/delta
URL routing for the browser and Node.js.
JavaScript★ 4↓ 905/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
bugout-dev/brood
Instantly add authentication, teams, and payments to your frontend, API, or serverless application.
Python★ 4Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
deskpro/react-datepicker-hijri
A simple and reusable datepicker component for React
JavaScript★ 4↓ 3,881/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
elemental-lf/k8s-crd-resolver
Resolves JSON references ($ref) in Kubernetes custom resource definitions
Python★ 4Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
gunk/gunkls
Gunk language server
Go★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
hazcod/gosecurity
Security library for Go, contains multihash-like library or encryption.
Go★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Rust★ 4↓ 52.1M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
35Weakhealth index
jridgewell/set-array
No repository description published.
TypeScript · JavaScript★ 4↓ 92.3M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
20At Riskhealth index
manuwarfare/abbtr
abbtr is a cli app (alternative to alias function) to abbreviate long commands in the terminal
Go★ 4Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
18Criticalhealth index
melihbirim/sieswi
Ultra-fast SQL-on-CSV engine in Go. Streams results instantly, auto-parallelizes big files, no database required.
Go · Shell★ 4Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
12Criticalhealth index
nitrictech/contracts
Contracts for the Nitric APIs, served by Nitric Membrane and consumed by various language SDKs
Mixed★ 4Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go
25At Riskhealth index
octasoft-ltd/gmail-exporter
A Go CLI tool for exporting and importing Gmail between accounts using OAuth
Go★ 4Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
25At Riskhealth index
open5gs/prometheus-client-c
A Prometheus Client in C
C★ 4Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
25At Riskhealth index
openshift/ceph-csi
CSI driver for ceph
Go★ 4Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
17Criticalhealth index
ruiii/plugin-Hairstrength
senka-calc for poi
JavaScript · CSS★ 4↓ 1,072/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
40Weakhealth index
sinonjs/commons
Simple functions shared among the sinon end user libraries
JavaScript★ 4↓ 213M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
unleashy/koota
Koota generates words given a pattern.
Ruby★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 166M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
wooorm/is-alphabetical
Check if a character is alphabetical
JavaScript★ 4↓ 190M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
NuGet
21At Riskhealth index
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
C#★ 4Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
22At Riskhealth index
AgustinBanchio/go-limit
No repository description published.
Go★ 3Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
9Criticalhealth index
Consensys-Incorporated/go-ethereum
Official golang implementation of the Ethereum protocol
Go · C★ 3Sep 16, 2026
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
RubyGems
37Weakhealth index
DFE-Digital/rspec-retry
Retry randomly failing rspec example. This is an extension to the original gem, that will log flakey tests to an output file.
Ruby★ 3Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0