Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,085
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,341 recordsRanked by popularity · browse by tag · record statistics
PyPI
27At Riskhealth index
click-contrib/click-log
Simple and beautiful logging for click applications
Python★ 110↓ 3.6M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
npm
33At Riskhealth index
QubitProducts/cherrytree
A flexible nested router.
JavaScript★ 109↓ 82/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
SBRG/ssbio
A Python framework for structural systems biology
Python★ 109↓ 60/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
allenai/allennlp-semparse
A framework for building semantic parsers (including neural module networks) with AllenNLP, built by the authors of AllenNLP
Python★ 109↓ 76/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
andylokandy/arraydeque
A circular buffer with fixed capacity (Rust).
Rust★ 109↓ 7M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
anton-bushuiev/PPIRef
Dataset and package for working with protein-protein interactions in 3D
Jupyter Notebook · Python★ 109Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Hex
22At Riskhealth index
benvp/ex_cva
Class Variance Authority for Elixir
Elixir★ 109↓ 2,490/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
corbado/corbado-nodejs
Add passkeys to your Node.js application with the Corbado Node.js SDK.
TypeScript★ 109↓ 2,350/moSep 30, 2026
MITSep 30, 2026 · metrics 2.10.0
Go
34At Riskhealth index
ethereum-optimism/asterisc
RISC-V interactive fault proof tech
Go · Solidity★ 109Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
farcaster-project/farcaster-node
Farcaster cross-chain atomic swap node.
Rust★ 109↓ 24/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Hex
33At Riskhealth index
fcevado/phone
Elixir phone number parser for numbers in international standard.
Elixir★ 109↓ 8,502/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
—
12Criticalhealth index
github/homebrew-gh
Homebrew tap for the GitHub CLI
Mixed★ 109Sep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
—
19Criticalhealth index
googleapis/python-translate
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-translate
Mixed★ 109Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
25At Riskhealth index
landakram/remark-wiki-link
Parse and render wiki links.
TypeScript · JavaScript★ 109↓ 87K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/keel
Spinnaker's declarative service
Kotlin★ 109Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
23At Riskhealth index
JoshGlazebrook/smart-buffer
smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.
TypeScript★ 108↓ 194M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · crates.io
31At Riskhealth index
bitcoinjs/tiny-secp256k1
A tiny secp256k1 native/JS wrapper
JavaScript · C++ · TypeScript★ 108↓ 2.7M/moOct 17, 2026
MITOct 17, 2026 · metrics 2.10.0
crates.io
22At Riskhealth index
japaric/syscall.rs
Raw system calls for Rust
Rust★ 108↓ 66.5K/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
—
18Criticalhealth index
nutjunkie/IQmol
IQmol is an open source molecular editor and visualization package
C++ · C★ 108Sep 10, 2026
GPL-3.0Sep 10, 2026 · metrics 2.10.0
—
14Criticalhealth index
urbit/arvo
No repository description published.
Mixed★ 108Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
RubyGems
16Criticalhealth index
chef-boneyard/chef-api
DEPRECATED: A tiny Chef API client with minimal dependencies
Ruby★ 107Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
19Criticalhealth index
coveooss/tgf
A Terragrunt frontend that allow execution of Terragrunt/Terraform through Docker
Go★ 107Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
dask/partd
Concurrent appendable key-value storage
Python★ 107↓ 24.2M/moOct 24, 2026
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
dbt-labs/dbt-redshift
This repository has moved into https://github.com/dbt-labs/dbt-adapters
Python★ 107Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
22At Riskhealth index
openxc/openxc-message-format
Specification for the OpenXC JSON message format
C · Python · Shell★ 107Sep 29, 2026
BSD-3-ClauseSep 29, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
pages-themes/time-machine
Time machine is a Jekyll theme for GitHub Pages
SCSS · HTML★ 107Sep 10, 2026
CC0-1.0Sep 10, 2026 · metrics 2.10.0
Packagist
51Moderatehealth index
prismicio-community/php-kit
Community maintained development kit for Prismic and the PHP language
PHP★ 107↓ 21.9K/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
aresponses/aresponses
Asyncio http mocking. Similar to the responses library used for 'requests'
Python★ 106↓ 141K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
25At Riskhealth index
emersion/go-sasl
🔑 A SASL library written in Go
Go★ 106Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
fcakyon/midv500
Download and convert MIDV-500 annotations to COCO instance segmentation format
Python★ 106↓ 312/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0