Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,062
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,590 recordsRanked by popularity · browse by tag · record statistics
npm · Maven
27At Riskhealth index
NativeScript/capacitor
NativeScript for Capacitor
TypeScript · Java★ 45↓ 1,282/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
dirs-dev/dirs-sys-rs
moved to https://codeberg.org/dirs/dirs-sys-rs
Rust★ 45↓ 27.5M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
scrapy-plugins/scrapy-jsonschema
Scrapy schema validation pipeline and Item builder using JSON Schema
Python★ 45↓ 923/moSep 20, 2026
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ebeweber/flake8-mutable
flake8 extension for mutable default arguments
Python★ 44↓ 159.3K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
13Criticalhealth index
huaweicloud/huaweicloud-sdk-java
No repository description published.
Java★ 44Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
kartik-v/yii2-widget-typeahead
Enhanced Yii2 wrapper for the Twitter Typeahead plugin (sub repo split from yii2-widgets).
JavaScript★ 44↓ 80.6K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
20At Riskhealth index
niftynei/glightning
A Golang driver for c-lightning. Includes both an RPC client and plugin framework
Go★ 44Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
37Weakhealth index
nknorg/nkn-sdk-js
JavaScript Implementation of NKN Client and Wallet SDK
JavaScript★ 44↓ 2,883/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
seanmonstar/want
No repository description published.
Rust★ 44↓ 45.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
16Criticalhealth index
teamcfadvance/ValidateThis
An object oriented validation framework for ColdFusion objects
ColdFusion · HTML★ 44Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
22At Riskhealth index
tidwall/xv
An expression evaluator for C
C★ 44Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
28At Riskhealth index
42atomys/webhooked
A webhook receiver on steroids.
Go★ 43Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
48Weakhealth index
cyberconnecthq/cybercontracts
No repository description published.
Solidity★ 43Sep 15, 2026
GPL-3.0Sep 15, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
firstbatchxyz/dkn-compute-launcher
Cross-platform launcher for Dria Compute Node.
Rust★ 43Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
hellman/cry
SageMath/Python Toolkit for Cryptanalytic Research
Python★ 43↓ 55/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
un33k/python-ipware
Returns the best matched IP address from a given HTTP(s) header in Python
Python★ 43↓ 4.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
marcuswestin/node-kafka
NOT MAINTAINED. See below:
JavaScript★ 42↓ 3,702/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
20At Riskhealth index
rejeep/git.el
An Elisp API for programmatically using Git
Emacs Lisp★ 42Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
semente/python-baseconv
Python module to convert numbers from base 10 integers to base X strings and back again.
Python★ 42↓ 1.7M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
12Criticalhealth index
sindresorhus/path-is-absolute
Node.js 0.12 path.isAbsolute() ponyfill
JavaScript★ 42↓ 363M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
axelf4/unicode-linebreak
󠁼💔 Implementation of the Unicode Line Breaking Algorithm in Rust
Rust★ 41↓ 7.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
11Criticalhealth index
dominictarr/json-buffer
No repository description published.
JavaScript★ 41↓ 529M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/object.pick
(object pick) returns a filtered copy of an object with only the specified keys, exactly like `pick` from lo-dash / underscore.
JavaScript★ 41↓ 45.2M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
minkphp/MinkZombieDriver
Zombie.js driver for Mink framework
PHP★ 41↓ 15.1K/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
16Criticalhealth index
scrutinizer-ci/ocular
CLI for uploading external code coverage data
PHP★ 41↓ 24.6K/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
shabbyrobe/grpc-stubs
gRPC typing stubs for Python
Python★ 41↓ 3.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
4Criticalhealth index
tsung-sc/JDPurchaser
京东抢购GO语言实现版本,抢购效率比Python原版本要高上数倍(目前还在开发中,获取最新版请查看dev分支)
Go★ 41Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
amphp/log
Non-blocking logging for PHP based on Amp and Monolog.
PHP★ 40↓ 89K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
48Weakhealth index
pillarjs/encodeurl
Encode a URL to a percent-encoded form, excluding already-encoded sequences
JavaScript★ 40↓ 561M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0