Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,076
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,340 recordsRanked by popularity · browse by tag · record statistics
npm
6Criticalhealth index
floatdrop/pinkie-promise
Promise ponyfill with pinkie
JavaScript★ 114↓ 49.1M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
32At Riskhealth index
jsdom/js-symbol-tree
Turn any collection of objects into its own efficient tree or linked list using Symbol
JavaScript★ 114↓ 290M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
kartik-v/yii2-editable
An enhanced editable widget for Yii 2.0 that allows easy editing of displayed data with html inputs, widgets and more.
PHP · JavaScript★ 114↓ 57.5K/moOct 14, 2026
Custom licenseOct 14, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
maxbeckers/amazon-alexa-php
Php library for amazon echo (alexa) skill development.
PHP★ 114↓ 3,334/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
crates.io
27At Riskhealth index
mcgoo/vcpkg-rs
Build library for finding native libraries in vcpkg for Rust - Windows (msvc), Linux and macOS
Rust★ 114↓ 35.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
20At Riskhealth index
poposnail61/min-sans
한·중·일 문자와 라틴 문자, 숫자를 조화롭게 만든 다국어 글꼴
CSS★ 114Sep 19, 2026
OFL-1.1Sep 19, 2026 · metrics 2.10.0
Hex
16Criticalhealth index
redrabbit/rethinkdb_ecto
RethinkDB adapter for Ecto.
Elixir★ 114Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
stevehodgkiss/generator_spec
Test Rails generators with RSpec
Ruby★ 114Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
—
17Criticalhealth index
IsmAvatar/LateralGM
A free Game Maker source file editor
Java★ 113Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
14Criticalhealth index
codemirror/basic-setup
Example configuration for the CodeMirror code editor
TypeScript★ 113↓ 35.7M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
libp2p/go-libp2p-swarm
The libp2p swarm manages groups of connections to peers, and handles incoming and outgoing streams
Go★ 113Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
30At Riskhealth index
longbridge/opencc
Pure Go version OpenCC 繁簡轉換
Go★ 113Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
openjsse/openjsse
OpenJSSE: A JSSE provider that supports TLS 1.3 on Java SE 8
Java★ 113Oct 19, 2026
GPL-2.0Oct 19, 2026 · metrics 2.10.0
—
35Weakhealth index
srawlins/timezone
Time zone database and time zone aware DateTime object for Dart.
Dart★ 113Oct 22, 2026
BSD-2-ClauseOct 22, 2026 · metrics 2.10.0
npm
28At Riskhealth index
WebReflection/html-escaper
A module to escape/unescape common problematic entities done the right way.
JavaScript★ 112↓ 331M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
21At Riskhealth index
andrewcooke/ParserCombinator.jl
A parser combinator library for Julia
Julia★ 112Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
22At Riskhealth index
beorn7/perks
Effective Computation of Things
Go★ 112Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/normalize-path
Normalize file path slashes to be unix-like forward slashes. Used by chokidar, anymatch, and many others!
JavaScript★ 112↓ 470M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
lang/unicode_utils
Unicode algorithms for Ruby 1.9
Ruby★ 112Sep 12, 2026
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
mysticatea/eslint-plugin-es
ESLint plugin about ECMAScript syntactic features.
JavaScript★ 112↓ 15.2M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
DavidEGrayson/ruby_ecdsa
This gem implements the Elliptic Curve Digital Signature Algorithm (ECDSA) almost entirely in pure Ruby.
Ruby★ 111Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
appium/appium-ios-simulator
Module for interacting with iOS simulators
TypeScript★ 111Oct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
25At Riskhealth index
ashleygwilliams/rockyou
exports the rockyou passwords for security testing
JavaScript★ 111Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
jekyll/jekyll-paginate
NO LONGER UNDER ACTIVE DEVELOPMENT as of Jekyll 3: Pagination Generator for Jekyll
Ruby★ 111Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
RubyGems
35Weakhealth index
mbj/concord
Mixin to ease compositions in ruby
Ruby★ 111Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
ndw/xmlcalabash1
XML Calabash, an XProc processor
Java · XQuery★ 111Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
phihag/ipaddress
Python 3.3+'s ipaddress for older Python versions
Python★ 111Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
ticketmaster/aurora
Shared UI Library for Ticketmaster
JavaScript★ 111↓ 6,638/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
wemake-services/flake8-broken-line
🚨 Flake8 plugin to forbid backslashes (\) for line breaks
Python★ 111↓ 611.5K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0