Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,788
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,256 recordsRanked by popularity · browse by tag · record statistics
npm
23At Riskhealth index
walling/unorm
JavaScript Unicode 8.0 Normalization - NFC, NFD, NFKC, NFKD.
JavaScript · Java · HTML★ 387↓ 8.5M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
bonsairobo/building-blocks
A voxel library for real-time applications.
Rust★ 385↓ 170/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
jorgecarleitao/parquet2
Fastest and safest Rust implementation of parquet. `unsafe` free. Integration-tested against pyarrow
Rust★ 385↓ 246.5K/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
55Moderatehealth index
jshttp/negotiator
An HTTP content negotiator for Node.js
JavaScript★ 384↓ 782M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
ipaddress-gem/ipaddress
A library to handle IPv4 and IPv6 addresses in a modern and productive way.
Ruby★ 382Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
neithere/argh
An argparse wrapper that doesn't make you say "argh" each time you deal with it.
Python★ 382↓ 2.4M/moAug 19, 2026
LGPL-3.0Aug 19, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
symplify/coding-standard
[Deprecated] Use ECS that includes this set with more new rules
PHP★ 381↓ 81.3K/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
ClueLang/Clue
C/Rust like programming language that compiles into Lua code
Rust★ 380↓ 88/moAug 14, 2026
MITAug 14, 2026 · metrics 2.10.0
npm
32At Riskhealth index
mathiasbynens/regenerate
Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.
JavaScript★ 378↓ 162M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
32At Riskhealth index
bytedance/syllepsis
Syllepsis is an out-of-the-box rich text editor.
TypeScript★ 377↓ 1,400/moAug 3, 2026
Custom licenseAug 3, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
chef-boneyard/chef-dk
DEPRECATED: A streamlined development and deployment workflow for Chef Infra platform.
Ruby★ 377Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
19Criticalhealth index
rabbitmq/rabbitmq-management
RabbitMQ Management UI and HTTP API
Erlang · JavaScript · HTML★ 373Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
threedaymonk/htmlbeautifier
A normaliser/beautifier for HTML that also understands embedded Ruby. Ideal for tidying up Rails templates.
Ruby★ 373Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
breamware/sidekiq-batch
Sidekiq Batch Jobs Implementation
Ruby★ 370Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
22At Riskhealth index
creationix/jsonparse
A streaming JSON parser written in pure JavaScript for node.js
JavaScript★ 370↓ 84.7M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
NuGet
18Criticalhealth index
DarkWanderer/ClickHouse.Client
Unofficial .NET client for ClickHouse database
C#★ 367Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Shopify/polaris-viz
A collection of React and React native components that compose Shopify's data visualization system
TypeScript★ 367↓ 312K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
syrusakbary/promise
Ultra-performant Promise implementation in Python
Python★ 367↓ 3.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
KieranWynn/pyquaternion
A fully featured, pythonic library for representing and using quaternions
Python★ 366↓ 2.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
etherspot/etherspot-sdk
Etherspot - Account Abstraction SDK
TypeScript · CSS★ 364↓ 1,441/moJul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
Maven
35Weakhealth index
jopt-simple/jopt-simple
Java library for parsing command line options
Java★ 364Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
RubyGems
16Criticalhealth index
sass/sassc-ruby
Use libsass with Ruby!
Ruby★ 364Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
Go · npm
26At Riskhealth index
linkxzhou/SimpleBase
LessDB a serverless SQLite service designed to simplify the use of cloud-based MySQL, PostgreSQL, and other databases.
C · Go★ 362Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
npm
12Criticalhealth index
i-voted-for-trump/is-odd
I created this in 2014, the year I learned how to program. All of the downloads are from an old version of https://github.com/micromatch/micromatch. I've done a few other things since: https://github.com/jonschlinkert.
JavaScript★ 361Aug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
phpspec/php-diff
A comprehensive library for generating differences between two strings in multiple formats (unified, side by side HTML etc). Based on the difflib implementation in Python
PHP★ 361↓ 667.9K/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
foutaise/texttable
Python module to create simple ASCII tables
Python★ 360↓ 24.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
9Criticalhealth index
vlasovskikh/funcparserlib
Recursive descent parsing library for Python based on functional combinators
Python★ 360↓ 208.3K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
alan-turing-institute/ReadabiliPy
A simple HTML content extractor in Python. Can be run as a wrapper for Mozilla's Readability.js package or in pure-python mode.
HTML · Python★ 359Aug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
google/pasta
Library to refactor python code through AST manipulation.
Python★ 359↓ 27.5M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0