Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,745
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,389 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
microsoft/p-graph
Moved to https://github.com/microsoft/beachball/tree/main/packages/p-graph
TypeScript★ 79↓ 120.1K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
pycontribs/ruyaml
ruyaml is a openly maintained fork of elusive ruamel-yaml package that can be used as as a drop-in replacement.
Python★ 79↓ 1.5M/moAug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
npm
35Weakhealth index
sindresorhus/array-union
Create an array of unique values, in order, from the input arrays
TypeScript · JavaScript★ 79↓ 255M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
vimaec/vim-webgl-viewer
An easy to use online 3D model viewer based on Three.JS.
TypeScript★ 79↓ 2,165/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
npm
19Criticalhealth index
alephium/desktop-wallet
The official Alephium wallet for desktop
TypeScript★ 78Jul 18, 2026
LGPL-3.0Jul 18, 2026 · metrics 2.10.0
29At Riskhealth index
basho/mochiweb
a branch of Mochi Media's excellent HTTP library -- their canonical source can be found at https://github.com/mochi/mochiweb
Erlang★ 78Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
NuGet
31At Riskhealth index
erri120/GameFinder
.NET library for finding games.
C#★ 78Jul 24, 2026
GPL-3.0Jul 24, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
sfackler/streaming-iterator
No repository description published.
Rust★ 78↓ 4.9M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
sonota88/anbt-sql-formatter
A tool for SQL formatting written in Ruby.
Ruby★ 78Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
Fennerr/PMapper
A tool for quickly evaluating IAM permissions in AWS.
Python★ 77Jul 22, 2026
AGPL-3.0Jul 22, 2026 · metrics 2.10.0
RubyGems
18Criticalhealth index
arnau/ISO8601
Ruby parser to work with ISO8601 dateTimes and durations — http://en.wikipedia.org/wiki/ISO_8601
Ruby★ 77Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
deprecated-packages/smart-file-system
[READ-ONLY] Use SmartFileInfo with useful methods that you need everyday
PHP★ 77↓ 27.5K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
radixdlt/radixdlt-java
A Java/Android Client library for interacting with a RADIX Distributed Ledger.
Java★ 77Aug 16, 2026
MITAug 16, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/echo
Spinnaker Eventing Service
Java · Groovy★ 77Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Azure/azure-data-lake-store-python
Microsoft Azure Data Lake Store Filesystem Library for Python
Python★ 76↓ 20.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
28At Riskhealth index
d3/d3-dispatch
Register named callbacks and call them with arguments.
JavaScript★ 76↓ 118M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
dcuddeback/termios-rs
Safe bindings for the termios library.
Rust★ 76↓ 4.6M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
27At Riskhealth index
fessonia/fessonia
A node module easing the burden of automating FFmpeg from Node.js
JavaScript★ 76↓ 384/moAug 16, 2026
MITAug 16, 2026 · metrics 2.10.0
12Criticalhealth index
isaacs/inflight-DEPRECATED-DO-NOT-USE
Add callbacks to requests in flight to avoid async duplication
Mixed★ 76Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
npm
28At Riskhealth index
mysticatea/eslint-utils
Utilities for ESLint plugins and custom rules.
JavaScript★ 76↓ 74.7M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
19Criticalhealth index
rtlsdrblog/rtl-sdr
RTL-SDR experimental branch
C★ 76Aug 25, 2026
GPL-2.0Aug 25, 2026 · metrics 2.10.0
npm
28At Riskhealth index
terkelg/globrex
Glob to regular expression with support for extended globs.
JavaScript★ 76↓ 144M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
tomprogrammer/rust-ascii
ASCII-only equivalents to `char`, `str` and `String`.
Rust★ 76↓ 6.8M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
codecov/codecov-ruby
Ruby uploader for Codecov
Ruby★ 75Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
30At Riskhealth index
faye/websocket-extensions-node
Generic extension management for WebSocket connections
JavaScript★ 75↓ 119M/moAug 31, 2026
Custom licenseAug 31, 2026 · metrics 2.10.0
Packagist
35Weakhealth index
mageplaza/magento-2-banner-slider
Magento 2 Banner slider for Magento is jQuery banner Slider you can create Unlimited beautiful responsive banner Slider
PHP★ 75↓ 6,532/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
probots-io/pinecone-php
A beautiful, extendable PHP Package to communicate with your pinecone.io indices, collections and vectors.
PHP★ 75↓ 13.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Packagist
23At Riskhealth index
Codeception/c3
Remote CodeCoverage for Codeception. Part of Codeception testing framework.
PHP★ 74↓ 94.5K/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
Go
16Criticalhealth index
Duck8823/duci
The simple ci server
Go★ 74Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0