Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,270
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,375 recordsRanked by popularity · browse by tag · record statistics
PyPI
38Weakhealth index
andhus/dirhash-python
Python module and CLI for hashing of file system directories based on the Dirhash Standard.
Python★ 61↓ 6.4M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
cqframework/cql-engine
Clinical Quality Language Evaluation Engine
Java★ 61Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
decred/politeiagui
No repository description published.
JavaScript★ 61Sep 20, 2026
ISCSep 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
getflywheel/local-components
Reusable React components to use in Local by Flywheel!
TypeScript · MDX · SCSS★ 61↓ 8,463/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
npm
40Weakhealth index
jonschlinkert/fill-range
Fill in a range of numbers or letters, positive or negative, optionally passing an increment or multiplier to use.
JavaScript★ 61↓ 594M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
jshttp/forwarded
Parse HTTP X-Forwarded-For header
JavaScript★ 61↓ 384M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
python-trio/pytest-trio
Pytest plugin for trio
Python★ 61↓ 350.1K/moSep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
rnnh/vaporiser
🎵 Creates a vaporwave (slowed, with reverb) remix of a given MP3 file, with the option of playing over a looped GIF as a video.
Python★ 61Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/mimic-response
Mimic a Node.js HTTP response stream
JavaScript★ 61↓ 247M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/front50
Spinnaker Metadata Repository Service
Java · Groovy · Kotlin★ 61Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Hex · npm
28At Riskhealth index
techgaun/zxcvbn-elixir
Elixir implementation of zxcvbn by dropbox
Elixir★ 61↓ 18K/moSep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
trendels/braceexpand
Bash-style brace expansion for Python
Python★ 61↓ 2.4M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
DeepRank/deeprank2
An open-source deep learning framework for data mining of protein-protein interfaces or single-residue variants.
Python · Jupyter Notebook★ 60↓ 83/moSep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
20At Riskhealth index
browserify/createHmac
Node style HMAC for use in the browser, with native implementation in node
JavaScript★ 60↓ 42.3M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
33At Riskhealth index
cosmo0920/win32-api
A different, better variant of the Win32API Ruby library
C · Ruby · Dockerfile★ 60Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
—
14Criticalhealth index
emersion/basu
The sd-bus library, extracted from systemd
C★ 60Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Packagist · npm
48Weakhealth index
imalhasaranga/PDFLib
A robust PHP library to manipulate PDFs using Ghostscript. Convert PDF to Images, Merge, Split, Encrypt, Watermark, Compress, and more with a simple fluent API.
PHP★ 60↓ 6,736/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
33At Riskhealth index
jonschlinkert/split-string
Split a string on a given character or characters, with support for escaping.
JavaScript★ 60↓ 47.4M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
28At Riskhealth index
mainland/language-c-quote
No repository description published.
Haskell★ 60Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
phensley/cldr-engine
Internationalization and localization in Typescript with Unicode CLDR, batteries included
TypeScript★ 60↓ 234.1K/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
piotrmurach/benchmark-trend
Measure performance trends of Ruby code
Ruby★ 60Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
18Criticalhealth index
request/oauth-sign
OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.
JavaScript★ 60Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
yaauie/cliver
A ruby gem that provides tools for detecting & verifying command-line dependencies
Ruby★ 60Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
NuGet
14Criticalhealth index
AvaloniaUtils/Material.Icons.Avalonia
Avalonia control for display material icons from Material.Icons: https://github.com/SKProCH/Material.Icons
C#★ 59Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
16Criticalhealth index
JaskaranSM/drivedlgo
High-performance concurrent Google Drive download CLI in Go — recursive folders, resume, OAuth2 + service accounts, MD5 verification, live progress.
Go★ 59Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
36Weakhealth index
Quantum-Flytrap/quantum-tensors
Quantum Tensors - NPM package for sparse matrix operations for quantum information and computing
TypeScript★ 59↓ 385/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0