Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,490
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,286 recordsRanked by popularity · browse by tag · record statistics
RubyGems
32At Riskhealth index
huacnlee/rails-settings-cached
Global settings for your Rails application.
Ruby★ 1,122Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
27At Riskhealth index
prettymuchbryce/http-status-codes
Constants enumerating the HTTP status codes. All status codes defined in RFC1945 (HTTP/1.0, RFC2616 (HTTP/1.1), and RFC2518 (WebDAV) are supported.
TypeScript★ 1,120↓ 31.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
renoki-co/laravel-eloquent-query-cache
Adding cache on your Laravel Eloquent queries' results is now a breeze.
PHP★ 1,119↓ 114.5K/moOct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
NuGet
21At Riskhealth index
canton7/RestEase
Easy-to-use typesafe REST API client library for .NET Standard 1.1 and .NET Framework 4.5 and higher, which is simple and customisable. Inspired by Refit
C#★ 1,116Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm · RubyGems
23At Riskhealth index
pid/speakingurl
Generate a slug – transliteration with a lot of options
JavaScript★ 1,116↓ 17.8M/moSep 23, 2026
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
PyCQA/pydocstyle
docstring style checker
Python★ 1,115↓ 4M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
aave/aave-v3-core
This repository contains the core smart contracts of the Aave V3 protocol.
TypeScript · Solidity★ 1,115↓ 11.6K/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
c4urself/bump2version
Version-bump your software with a single command
Python★ 1,115↓ 1.6M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
moneta-rb/moneta
a unified interface to key/value stores
Ruby★ 1,115Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
37Weakhealth index
edsrzf/mmap-go
A portable mmap package for Go
Go★ 1,113Sep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
curvefi/curve-contract
Vyper contracts used in Curve.fi exchange pools.
Python★ 1,111Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
fengsp/color-thief-py
Grabs the dominant color or a representative color palette from an image. Uses Python and Pillow.
Python★ 1,109↓ 508.2K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
matrix-org/matrix-react-sdk
Matrix SDK for React Javascript
TypeScript★ 1,109Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
flipperdevices/flipperzero-ufbt
Compact tool for building and debugging applications for Flipper Zero.
Python★ 1,106↓ 23.6K/moSep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go · PyPI
32At Riskhealth index
iov-one/weave
Easy-to-use SDK to build Tendermint ABCI applications
Go★ 1,105Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
29At Riskhealth index
d3/d3-geo
Geographic projections, spherical shapes and spherical trigonometry.
JavaScript★ 1,103↓ 117M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io · npm
19Criticalhealth index
holochain/holochain-rust
DEPRECATED. The Holochain framework implemented in rust with a redux style internal state-model.
Rust★ 1,103Sep 14, 2026
GPL-3.0Sep 14, 2026 · metrics 2.10.0
npm
34At Riskhealth index
istanbuljs/istanbuljs
monorepo containing the various nuts and bolts that facilitate istanbul.js test instrumentation
JavaScript★ 1,103↓ 1.5B/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
23At Riskhealth index
peterh/liner
Pure Go line editor with history, inspired by linenoise
Go★ 1,099Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
BurntSushi/byteorder
Rust library for reading/writing numbers in big-endian and little-endian.
Rust★ 1,096↓ 50.8M/moSep 16, 2026
UnlicenseSep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Grokzen/redis-py-cluster
Python cluster client for the official redis cluster. Redis 3.0+.
Python · Ruby★ 1,094↓ 2.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
man-c/pycoingecko
Python wrapper for the CoinGecko API
Python★ 1,092Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
c0fec0de/anytree
Python tree data library
Python★ 1,091↓ 6.7M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet
30At Riskhealth index
gmamaladze/globalmousekeyhook
This library allows you to tap keyboard and mouse, detect and record their activity even when an application is inactive and runs in background.
C#★ 1,091Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dtolnay/paste
Macros for all your token pasting needs
Rust★ 1,090↓ 32.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
16Criticalhealth index
request/request-promise-native
The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.
JavaScript★ 1,087↓ 11.2M/moSep 15, 2026
ISCSep 15, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
chrisk/fakeweb
Ruby test helper for injecting fake responses to web requests
Ruby★ 1,086Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
23At Riskhealth index
KyleBanks/depth
Visualize Go Dependency Trees
Go★ 1,085Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0