Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,491
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,240 recordsRanked by popularity · browse by tag · record statistics
12Criticalhealth index
alibaba-archive/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Go★ 4Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
astroport-fi/terra-plus
Production Quality contracts under open source licenses
Rust★ 4Aug 11, 2026
AGPL-3.0Aug 11, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
ayrat555/solana_ex
No repository description published.
Elixir★ 4↓ 2,036/moJul 29, 2026
MITJul 29, 2026 · metrics 2.10.0
Hex · crates.io
22At Riskhealth index
benodiwal/bubblegum_nifs
Elixir interface for Metaplex Bubblegum compressed NFTs on Solana. This library provides functions to create, mint, and transfer compressed NFTs using the Metaplex Bubblegum program.
Elixir · Rust★ 4↓ 2,025/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
bretello/fancycompleter
Colorful Python tab completion - fork of https://github.com/pdbpp/fancycompleter
Python★ 4Aug 19, 2026
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
19Criticalhealth index
cwru-rcci/dug
dug is a utility similar to du that focuses on summarizing usage by group or owner
C★ 4Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
cyrusbiotechnology/dj-protein
Django utilities and tools for protein storage and manipulation
Python★ 4Jul 15, 2026
MITJul 15, 2026 · metrics 2.10.0
Go
16Criticalhealth index
dfinity/terraform-provider-ic
A Terraform provider for provisioning Internet Computer canisters
Go★ 4Jul 31, 2026
Apache-2.0Jul 31, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ecnepsnai/ds
A key-value store with hash indexes
Go★ 4Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
11Criticalhealth index
evalplus/humanevalplus_release
Release repository for HumanEval+ data
Python · Shell★ 4Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
16Criticalhealth index
grantila/list-open-files
lsof for Node.js
TypeScript★ 4↓ 145.8K/moAug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
Go
15Criticalhealth index
hexops/gotextdiff
Unified text diffing in Go (copy of the internal diffing packages the officlal Go language server uses)
Go★ 4Jul 30, 2026
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
npm
12Criticalhealth index
hs85jeong/korean-lotto
No repository description published.
JavaScript★ 4↓ 24/moSep 5, 2026
No licenseSep 5, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Rust★ 4↓ 46.2M/moAug 3, 2026
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
35Weakhealth index
jridgewell/set-array
No repository description published.
TypeScript · JavaScript★ 4↓ 108M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
23At Riskhealth index
mafintosh/mkdirp-classic
Mirror of mkdirp 0.5.2
JavaScript★ 4↓ 116M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
19Criticalhealth index
maplibre/maplibre-native-base
MapLibre Native Base C++ Libraries
C++ · CMake★ 4Aug 22, 2026
BSD-3-ClauseAug 22, 2026 · metrics 2.10.0
Go
19Criticalhealth index
michaelrampl/commity
Make writing commit messages fun again.
Go★ 4Aug 22, 2026
No licenseAug 22, 2026 · metrics 2.10.0
11Criticalhealth index
newrelic/nuget-azure-cloud-services
The nuget package for x64 apps (VMs or Cloud Services - Web Roles | Worker Roles) running on Windows Azure
PowerShell · C#★ 4Jul 29, 2026
MITJul 29, 2026 · metrics 2.10.0
23At Riskhealth index
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
Mixed★ 4Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
scieloorg/ioisis
I/O for ISIS files in Python
Python★ 4↓ 23/moAug 24, 2026
BSD-2-ClauseAug 24, 2026 · metrics 2.10.0
npm
41Weakhealth index
sinonjs/commons
Simple functions shared among the sinon end user libraries
JavaScript★ 4↓ 228M/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
25At Riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 164M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
25At Riskhealth index
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
JavaScript★ 4↓ 198M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/is-alphabetical
Check if a character is alphabetical
JavaScript★ 4↓ 183M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
Ruby★ 4Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
NuGet
25At Riskhealth index
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
C#★ 4Aug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
Rust★ 3Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
Automattic/sqlite-database-integration
A fork of https://github.com/WordPress/sqlite-database-integration/.
PHP · ANTLR★ 3Jul 25, 2026
GPL-2.0Jul 25, 2026 · metrics 2.10.0