Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,763
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,327 recordsRanked by popularity · browse by tag · record statistics
14Criticalhealth index
Arsunt/TR2Main
Tomb Raider II Injector Dynamic Library
C++ · C★ 202Jul 28, 2026
GPL-3.0Jul 28, 2026 · metrics 2.10.0
Go
40Weakhealth index
OpenPeeDeeP/depguard
Go linter that checks if package imports are in a list of acceptable packages.
Go★ 202Aug 4, 2026
GPL-3.0Aug 4, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
benalavi/waveform
Generate waveform images from audio files
Ruby★ 202Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
hyperium/hyper-tls
No repository description published.
Rust★ 201↓ 17.5M/moAug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
npm
16Criticalhealth index
psaren/taro-ui-vue
UI KIT for Taro/vue
SCSS · Vue · JavaScript★ 201↓ 723/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
npm
40Weakhealth index
tapjs/signal-exit
when you want to fire an event no matter how a process exits.
TypeScript · JavaScript★ 201↓ 1.1B/moAug 4, 2026
BlueOak-1.0.0Aug 4, 2026 · metrics 2.10.0
npm
23At Riskhealth index
unclechu/node-deep-extend
Recursive extend module
JavaScript★ 201↓ 173M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
Nayjest/Grids
Grids framework for Laravel
PHP★ 200↓ 788/moAug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
18Criticalhealth index
ziglang/zig-pypi
The Zig programming language, packaged for PyPI
Python★ 200Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
arguslab/Argus-SAF
Argus static analysis framework
Scala★ 199Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
npm
31At Riskhealth index
isaacs/node-mkdirp
Recursively mkdir, like `mkdir -p`, but in node.js
TypeScript · JavaScript★ 199↓ 550M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
qawolf/playwright-video
🎬 Save a video of a Playwright page
TypeScript★ 199↓ 30K/moAug 3, 2026
BSD-3-ClauseAug 3, 2026 · metrics 2.10.0
Maven
51Moderatehealth index
vesoft-inc/nebula-java
Client API and data importer of Nebula Graph in Java
Java★ 199Aug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
28At Riskhealth index
d3/d3-path
Serialize Canvas path commands to SVG.
JavaScript★ 197↓ 366M/moAug 31, 2026
ISCAug 31, 2026 · metrics 2.10.0
npm
30At Riskhealth index
tapjs/stack-utils
Captures and cleans stack traces.
JavaScript★ 197↓ 214M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
wasmCloud/wascc-host
Library for hosting actors and capability providers in a host process
Rust★ 197Aug 23, 2026
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
basepom/duplicate-finder-maven-plugin
Maven plugin to find duplicate classes or resources
Java · Groovy★ 196Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytest-dev/pytest-repeat
pytest plugin for repeating test execution
Python★ 195↓ 15M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
23At Riskhealth index
FredKSchott/rollup-plugin-polyfill-node
A modern Node.js polyfill for your Rollup bundle.
TypeScript · JavaScript★ 193↓ 1.3M/moAug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
19Criticalhealth index
PX4/PX4-Matrix
Lightweight, dependency free Matrix library (BSD)
C++★ 193Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Go
13Criticalhealth index
google/shlex
Automatically exported from code.google.com/p/go-shlex
Go★ 193Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
smol-rs/async-broadcast
Async broadcast channels
Rust★ 193↓ 8.8M/moAug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
24At Riskhealth index
TheDoctor0/zip-release
GitHub action that can be used to create release zip archive.
Shell★ 192Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
npm
21At Riskhealth index
browserify/path-browserify
The path module from Node.js for browsers
JavaScript★ 192↓ 165M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
ruby-concurrency/thread_safe
Thread-safe collections for Ruby (merged with concurrent-ruby)
Java · Ruby★ 192Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
71Goodhealth index
twilio/twilio-cli
Unleash the power of Twilio from your command prompt
JavaScript★ 192↓ 74.6K/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
Amber-MD/pytraj
Python interface of cpptraj
Jupyter Notebook · Python★ 191↓ 610/moSep 8, 2026
Custom licenseSep 8, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
SchedMD/slurm-gcp
Slurm on Google Cloud Platform
HCL · Python★ 191Aug 17, 2026
Apache-2.0Aug 17, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
alchemy-fr/BinaryDriver
Binary driver utilities
PHP★ 191↓ 56.4K/moJul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0