Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,055
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,609 recordsRanked by popularity · browse by tag · record statistics
Packagist
23At Riskhealth index
Elendev/composer-push
Provide a `push` command to composer to push to repositories
PHP★ 53↓ 3,212/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
Gilnaa/globwalk
No repository description published.
Rust★ 53↓ 4.5M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
leanprover/KLR
A formalization of ML kernel languages
C · Lean · C++★ 53↓ 26/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
lydell/resolve-url
[DEPRECATED] Like Node.js’ `path.resolve`/`url.resolve` for the browser.
JavaScript★ 53↓ 38M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
22At Riskhealth index
mjknowles/matrix-mcp-server
MCP Server for a Matrix home server integration; chat, manage rooms, etc.
TypeScript★ 52Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
rocketsciencegg/go-ts3
A golang TeamSpeak 3 ServerQuery client
Go★ 52Sep 20, 2026
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/p-each-series
Iterate over promises serially
JavaScript · TypeScript★ 52↓ 19.9M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
unicode-rs/unicode-xid
No repository description published.
Rust★ 52↓ 35.8M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
25At Riskhealth index
vercel/body-scroll-lock
Body scroll locking that just works with everything 😏
JavaScript★ 52Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
ebkalderon/renderdoc-rs
RenderDoc application bindings for Rust
Rust★ 51↓ 3.3M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist · npm
27At Riskhealth index
fatturaelettronicaphp/FatturaElettronica
Pacchetto PHP per la lettura, la generazione e la validazione della fattura elettronica, sia per la Pubblica Amministrazione che tra privati (B2B)
PHP★ 51↓ 3,748/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
22At Riskhealth index
ice1000/code_wars_android
:computer: A mobile client for CodeWars
Dart★ 51Sep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
ikalnytskyi/picobox
Dependency injection framework designed with Python in mind.
Python★ 51↓ 215.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
nbaksalyar/rust-streaming-http-parser
Streaming HTTP parser for Rust, based on nodejs/http-parser
Rust · PowerShell★ 51↓ 9,089/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
18Criticalhealth index
storybook-eol/storybook-ui
REPO/PACKAGE MOVED - Core Storybook UI
JavaScript★ 51Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
wesleytodd/setprototypeof
Polyfill for Object.setPrototypeOf
JavaScript★ 51↓ 466M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
Packagist
23At Riskhealth index
ConvertAPI/convertapi-library-php
A PHP library for the ConvertAPI
PHP★ 50↓ 94.8K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
27At Riskhealth index
JuliaMath/TensorCore.jl
Lightweight package for sharing tensor-algebra definitions
Julia★ 50Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
10Criticalhealth index
ModuleArt/ferny
Chromium-based web browser, built on top of Electron.
JavaScript · CSS · HTML★ 50Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
40Weakhealth index
Spomky-Labs/aes-key-wrap
Pure PHP library for AES Key Wrapping (RFC3394 and RFC5649)
PHP★ 50↓ 611.2K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
25At Riskhealth index
TykTechnologies/api-to-mcp
Turn any API to MCP tool
TypeScript★ 50Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
baby-markt/deepl-php-lib
🧠 DeepL API Client Library supporting PHP >= 7.3
PHP★ 50↓ 447/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
jethrogb/rust-cexpr
A C expression parser and evaluator
Rust★ 50↓ 19M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
24At Riskhealth index
VapiAI/client-sdk-react-native
This package lets you start Vapi calls directly in your React native.
TypeScript★ 49Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
arcnmx/serde-value
Serialization value trees
Rust★ 49↓ 10.3M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
12Criticalhealth index
jonschlinkert/is-windows
Returns true if the platform is Windows (and Cygwin or MSYS/MinGW for unit tests)
JavaScript★ 49↓ 131M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
20At Riskhealth index
qu1x/huawei-wmi
Sets group write privileges and reinstates battery charge-thresholds.
Makefile · Shell★ 49Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
RubyGems · Maven
23At Riskhealth index
jruby/jruby-parser
JRuby's parser customized for IDE usage
Java · Yacc★ 48Sep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0