Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,417
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,435 recordsRanked by popularity · browse by tag · record statistics
RubyGems
23At Riskhealth index
judofyr/minitest-line
No repository description published.
Ruby★ 36Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
—
17Criticalhealth index
leanprover/lean4checker
Replay the `Environment` for a given Lean module, ensuring that all declarations are accepted by the kernel.
Lean★ 36Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
46Weakhealth index
mapbox/cheap-ruler-cpp
Fast approximations for common geodesic measurements
C++ · CMake★ 36Oct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
masover/blankslate
BlankSlate from Builder. This is supposed to be a separate gem, but I can't find it anywhere.
Ruby★ 36Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
18Criticalhealth index
microsoft/redutil
Thread-safe and consistent Redis utilities for Go.
Go★ 36Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
n24q02m/better-godot-mcp
Composite MCP server for Godot Engine -- 17 composite tools for AI-assisted game development.
TypeScript★ 36↓ 995/moOct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
paritytech/bn
Pairing cryptography library in Rust
Rust★ 36↓ 331.4K/moOct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
—
37Weakhealth index
purescript-contrib/purescript-coroutines
Computations which can suspend their execution and return control to their invoker
PureScript★ 36Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
pylint-dev/pylint-celery
Pylint plugin for analysing code using Celery
Python★ 36Sep 12, 2026
GPL-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
python-trio/outcome
Capture the outcome of Python function calls
Python · Shell★ 36↓ 31.9M/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI · npm
19Criticalhealth index
readthedocs/readthedocs-sphinx-search
Deprecated: Enable search-as-you-type feature for docs hosted by RTD.
Python · JavaScript★ 36↓ 84.6K/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
sanic-org/sanic-testing
Test clients for Sanic
Python★ 36Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
spenceforce/pdb-attach
A python debugger that can attach to running processes.
Python★ 36Oct 22, 2026
BSD-3-ClauseOct 22, 2026 · metrics 2.10.0
npm
17Criticalhealth index
stefanpenner/get-caller-file
No repository description published.
TypeScript★ 36↓ 518M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
stesla/base32
A library which provides base32 decoding and encoding.
Ruby★ 36Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
51Moderatehealth index
wireapp/generic-message-proto
Protocol definition for generic messages.
Swift★ 36↓ 11.7K/moSep 15, 2026
GPL-3.0Sep 15, 2026 · metrics 2.10.0
npm
30At Riskhealth index
wooorm/bcp-47-match
Match BCP 47 language tags with language ranges per RFC 4647
JavaScript★ 36↓ 13.5M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
25At Riskhealth index
yanagiba/swift-lint
A static source code analysis tool to improve quality and reduce defects for Swift.
Swift★ 36Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
20At Riskhealth index
CanardMandarin/csp-bypass
Need any help bypassing CSP ?
JavaScript · HTML★ 35↓ 110/moOct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
Diggsey/rust-field-offset
Safe pointer-to-member functionality for rust
Rust★ 35↓ 4M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
—
25At Riskhealth index
JuliaData/DataAPI.jl
A data-focused namespace for packages to share functions
Julia★ 35Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Go
40Weakhealth index
NillionNetwork/nilchain
Coordination layer for the Nillion Network
Go★ 35Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
algolia/algolia-sitemap
a node library allowing you to generate sitemaps from an Algolia index.
JavaScript★ 35↓ 35.3K/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
eyre-rs/indenter
Display trait indentation helper for errors
Rust★ 35Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
forcedotcom/lightning-language-server
LWC and Aura Language Servers - shipped as part of the Salesforce VSCode Extensions
JavaScript · TypeScript★ 35↓ 6,322/moSep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
—
31At Riskhealth index
inie0722/air-ctl
C Language Template Library C语言 模板库
C · C++★ 35Sep 13, 2026
BSL-1.0Sep 13, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
jinko-core/jinko
Jinko is a small and safe interpreted language with fast Rust and C FFI
Rust★ 35Sep 13, 2026
GPL-2.0Sep 13, 2026 · metrics 2.10.0
npm
20At Riskhealth index
jonschlinkert/global-modules
Returns the directory used by NPM for globally installed NPM packages.
JavaScript★ 35↓ 119M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jslicense/spdx-correct.js
correct invalid SPDX identifiers
JavaScript★ 35↓ 154M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0