Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,489
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,449 recordsRanked by popularity · browse by tag · record statistics
Go
33At Riskhealth index
invopop/yaml
A better way to marshal and unmarshal YAML in Golang
Go★ 30Sep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
—
17Criticalhealth index
kwonoj/protobuf-wasm
No repository description published.
Mixed★ 30Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Hex
27At Riskhealth index
livebook-dev/kino_maplibre
MapLibre integration for Livebook
Elixir · JavaScript★ 30↓ 1,427/moOct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
matchory/elasticsearch
The missing Elasticsearch ORM for Laravel
PHP★ 30↓ 3,082/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
29At Riskhealth index
micromatch/posix-character-classes
POSIX character classes for creating regular expressions.
JavaScript★ 30Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
12Criticalhealth index
mjackson/value-equal
Are these two JavaScript values equal?
JavaScript★ 30↓ 21.6M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Go
30At Riskhealth index
nishanths/predeclared
Find declarations in Go source code that shadow predeclared identifiers
Go★ 30Sep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
orbitalci/orbital
Orbital is a self-hosted CI system for solo/small consulting dev teams. Written in Rust.
Rust★ 30Sep 10, 2026
GPL-3.0Sep 10, 2026 · metrics 2.10.0
npm
21At Riskhealth index
plivo/plivo-browser-sdk2-examples
Example app for the Plivo Browser SDK v2
JavaScript · HTML · CSS★ 30Oct 24, 2026
No licenseOct 24, 2026 · metrics 2.10.0
npm
23At Riskhealth index
polemius/postcss-clamp
PostCSS plugin to transform clamp() to combination of min/max
JavaScript★ 30↓ 22M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
20At Riskhealth index
regular/unbzip2-stream
streaming unbzip2 implementatio in pure javascript for node and browsers
JavaScript★ 30↓ 47.9M/moSep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
npm
23At Riskhealth index
request/aws-sign
AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.
JavaScript★ 30Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
NuGet
28At Riskhealth index
rzander/jaindb
Blockchain based database
C# · PowerShell★ 30Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
25At Riskhealth index
samirelanduk/molstar-react
Molstar as a react component
JavaScript★ 30↓ 1,169/moOct 18, 2026
ISCOct 18, 2026 · metrics 2.10.0
Go
53Moderatehealth index
sedaprotocol/seda-chain
SEDA chain network
Go★ 30Oct 18, 2026
GPL-3.0Oct 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
serialport/bindings-cpp
The C++ bindings for the node serialport project.
C++ · TypeScript★ 30↓ 1M/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
sigp/milagro_bls
BLS12-381 cryptography using Apache Milagro
Rust★ 30Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
sindresorhus/number-is-nan
ES2015 Number.isNaN() ponyfill
JavaScript★ 30↓ 36.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
18Criticalhealth index
tylerdevx/geetest-solver
A blazing-fast and ready-to-use API to solve Geetest captchas.
Go★ 30Oct 18, 2026
BSD-2-ClauseOct 18, 2026 · metrics 2.10.0
crates.io · npm · PyPI
19Criticalhealth index
EVerest/everest-framework
No repository description published.
C++★ 29Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Hex
31At Riskhealth index
ExWeb3/ex_keccak
Elixir library for computing Keccak SHA3-256 hashes using a NIF built tiny-keccak Rust crate.
Elixir★ 29Oct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
—
29At Riskhealth index
JuliaFolds/FoldsThreads.jl
Extra threaded executors for JuliaFolds/*.jl
Julia★ 29Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
—
46Weakhealth index
JuliaMath/InverseFunctions.jl
Interface for function inversion in Julia
Julia★ 29Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
—
11Criticalhealth index
Lil-House/LilCTF-2025
LilCTF 2025 challenges, source code, official writeups, and players' writeups.
Python · HTML · C++★ 29Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
MetaMask/eth-json-rpc-filters
json-rpc-engine middleware implementing ethereum filter methods
JavaScript★ 29↓ 164.3K/moSep 28, 2026
ISCSep 28, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
Moustafa22/Laravel-Aramex-SDK
Aramex open source Laravel SDK to integrate with Aramex API's
PHP★ 29↓ 1,095/moSep 28, 2026
MITSep 28, 2026 · metrics 2.10.0
—
17Criticalhealth index
PacificBiosciences/pbipa
Improved Phased Assembler
Mixed★ 29Sep 13, 2026
BSD-3-Clause-ClearSep 13, 2026 · metrics 2.10.0
NuGet
14Criticalhealth index
PowerShell/MMI
No repository description published.
C#★ 29Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
apalmblad/ruby-shadow
Ruby-shadow on github, ruby19 support
C · Ruby★ 29Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0