Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,768
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,309 recordsRanked by popularity · browse by tag · record statistics
PyPI
53Moderatehealth index
codezonediitj/pydatastructs
A python package for data structures and algorithms
Python · C++★ 212↓ 102/moJul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
npm
29At Riskhealth index
grncdr/merge-stream
Merge multiple streams into one interleaved stream
JavaScript★ 212↓ 349M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
26At Riskhealth index
zalando-stups/oauth2-client-js
A library to help you handle OAuth2 access and refresh tokens
JavaScript★ 212Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
bytecodealliance/registry
WebAssembly Registry (Warg)
Rust★ 211↓ 48.5K/moJul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
npm
22At Riskhealth index
gkz/type-check
a library which allows you to check the types of JavaScript values at runtime with a Haskell like type syntax
LiveScript★ 211↓ 574M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
28At Riskhealth index
libmir/mir
Mir (backports): Sparse tensors, Hoffman
D★ 211Aug 23, 2026
BSL-1.0Aug 23, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
CodeForPhilly/chime
COVID-19 Hospital Impact Model for Epidemics
Python★ 210↓ 1,135/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
PaperMC/adventure-platform
Adventure platform implementations
Java★ 210Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
quiqua/pytest-dotenv
A py.test plugin that parses environment files before running tests
Python★ 210↓ 5.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
33At Riskhealth index
twitchyliquid64/golang-asm
The assembler from the Go compiler, in library form.
Go★ 210Jul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
DrSchottky/pwnagotchi
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
JavaScript · Python · CSS★ 208Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
Galbar/JsonPath-PHP
A JsonPath implementation in PHP
PHP★ 208↓ 240.4K/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
29At Riskhealth index
d3/d3-axis
Human-readable reference marks for scales.
JavaScript · HTML★ 208↓ 65.7M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
Go
26At Riskhealth index
tommy-muehle/go-mnd
Magic number detector for Go.
Go★ 208Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
ianwhite/orm_adapter
Provides a single point of entry for using basic features of ruby ORMs
Ruby★ 207Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
25At Riskhealth index
jonschlinkert/word-wrap
Wrap words to a specified length.
JavaScript★ 207↓ 521M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
32At Riskhealth index
mmahnic/argumentum
C++ command line parsing library
C++★ 207Jul 25, 2026
MPL-2.0Jul 25, 2026 · metrics 2.10.0
Go
18Criticalhealth index
natefinch/atomic
atomic is a go package for atomic file writing
Go★ 207Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
kennethreitz-archive/args
Argument Parsing for Humans™
Python★ 206Jul 30, 2026
BSD-2-ClauseJul 30, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
socketry/async-io
Concurrent wrappers for native Ruby IO & Sockets.
Ruby★ 206Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
crates.io
27At Riskhealth index
AltF02/x11-rs
Rust bindings for X11 libraries
Rust★ 205↓ 7.9M/moAug 11, 2026
MITAug 11, 2026 · metrics 2.10.0
npm
12Criticalhealth index
broofa/node-int64
Support for representing 64-bit integers in JavaScript
JavaScript★ 205↓ 210M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
NuGet
18Criticalhealth index
force-net/Crc32.NET
Fast version of Crc32 algorithm for .NET
C#★ 205Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
15Criticalhealth index
hoiheart/vue-diff
VueJS diff viewer plugin
TypeScript · Vue★ 205↓ 46.7K/moJul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
django-ldapdb/django-ldapdb
django-ldapdb, an LDAP database backend for Django
Python★ 204Sep 8, 2026
BSD-2-ClauseSep 8, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dtolnay/proc-macro-hack
Procedural macros in expression position
Rust★ 204↓ 5.4M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
interledger/interledger-rs
An easy-to-use, high-performance Interledger implementation written in Rust
Rust★ 204Aug 14, 2026
Custom licenseAug 14, 2026 · metrics 2.10.0
14Criticalhealth index
thecodingmachine/kickoff-docker-php
:whale: :elephant: :rocket: Easily setup a PHP project with Docker
Shell★ 204Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
documentcloud/closure-compiler
A Ruby Wrapper for the Google Closure Compiler
Ruby★ 203Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
14Criticalhealth index
Arsunt/TR2Main
Tomb Raider II Injector Dynamic Library
C++ · C★ 202Jul 28, 2026
GPL-3.0Jul 28, 2026 · metrics 2.10.0