Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,038
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,648 recordsRanked by popularity · browse by tag · record statistics
Hex
16Criticalhealth index
redrabbit/rethinkdb_ecto
RethinkDB adapter for Ecto.
Elixir★ 114Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
30At Riskhealth index
longbridge/opencc
Pure Go version OpenCC 繁簡轉換
Go★ 113Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
28At Riskhealth index
WebReflection/html-escaper
A module to escape/unescape common problematic entities done the right way.
JavaScript★ 112↓ 331M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
21At Riskhealth index
andrewcooke/ParserCombinator.jl
A parser combinator library for Julia
Julia★ 112Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/normalize-path
Normalize file path slashes to be unix-like forward slashes. Used by chokidar, anymatch, and many others!
JavaScript★ 112↓ 470M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
25At Riskhealth index
ashleygwilliams/rockyou
exports the rockyou passwords for security testing
JavaScript★ 111Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
33At Riskhealth index
QubitProducts/cherrytree
A flexible nested router.
JavaScript★ 109↓ 82/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
andylokandy/arraydeque
A circular buffer with fixed capacity (Rust).
Rust★ 109↓ 7M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
farcaster-project/farcaster-node
Farcaster cross-chain atomic swap node.
Rust★ 109↓ 24/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
12Criticalhealth index
github/homebrew-gh
Homebrew tap for the GitHub CLI
Mixed★ 109Sep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
npm
23At Riskhealth index
JoshGlazebrook/smart-buffer
smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.
TypeScript★ 108↓ 194M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
fcakyon/midv500
Download and convert MIDV-500 annotations to COCO instance segmentation format
Python★ 106↓ 312/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
48Weakhealth index
tree-sitter/tree-sitter-regex
Tree-sitter parser for regular expressions
JavaScript · Tree-sitter Query★ 106↓ 1M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
21At Riskhealth index
base-repos/base
Base is the foundation for creating modular, unit testable and highly pluggable, server-side node.js applications.
JavaScript★ 105Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
23At Riskhealth index
browserify/stream-browserify
the stream module from node core for browsers
JavaScript★ 105↓ 79.4M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
kafka-python-ng/kafka-python-ng
Fork for Python client for Apache Kafka
Python★ 105Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
36Weakhealth index
sindresorhus/is-plain-obj
Check if a value is a plain object
JavaScript · TypeScript★ 105↓ 475M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
Drekin/win-unicode-console
A Python package to enable Unicode support when running Python from Windows console.
Python★ 103↓ 546.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
23At Riskhealth index
betaveros/paradoc
GolfScript/CJam-inspired stack-based programming language that can be golfed or written literately*
Python★ 103Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
25At Riskhealth index
epoberezkin/json-schema-traverse
Traverse JSON Schema passing each schema object to callback
JavaScript★ 103↓ 1.2B/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
21At Riskhealth index
jensyt/imurmurhash-js
An incremental implementation of MurmurHash3 for JavaScript
JavaScript★ 103↓ 552M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
48Weakhealth index
jshttp/compressible
Compressible Content-Type / mime checking.
JavaScript★ 103↓ 154M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
35Weakhealth index
RedKenrok/node-audiorecorder
Audio recorder for Node.js, delivers a 16-bit signed-integer linear pulse modulation WAV stream.
JavaScript★ 102↓ 12.6K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
XanaduAI/MrMustard
A differentiable bridge between phase space and Fock space
Python★ 102Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
21At Riskhealth index
browserify/randombytes
random bytes from browserify stand alone
JavaScript★ 102↓ 129M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
29At Riskhealth index
koopjs/FeatureServer
An open source Geoservices Implementation (deprecated)
JavaScript★ 102↓ 783/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
50Moderatehealth index
rehypejs/rehype-minify
plugins to minify HTML
JavaScript★ 101↓ 139M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
32At Riskhealth index
reyesoft/ngx-jsonapi
JSON API client library for Angular 5+ 👌 :: Production Ready 🚀
TypeScript★ 101↓ 30/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
18Criticalhealth index
sharetribe/ftw-daily
Deprecated! Sharetribe Flex Template for Web
JavaScript · CSS★ 101Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
RubyGems
18Criticalhealth index
SciRuby/statsample
A suite for basic and advanced statistics on Ruby.
Ruby★ 100Sep 20, 2026
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0