Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,763
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,327 recordsRanked by popularity · browse by tag · record statistics
NuGet
22At Riskhealth index
Polly-Contrib/Polly.Contrib.WaitAndRetry
Polly.Contrib.WaitAndRetry is an extension library for Polly containing helper methods for a variety of wait-and-retry strategies.
C#★ 142Aug 29, 2026
Custom licenseAug 29, 2026 · metrics 2.10.0
19Criticalhealth index
XiaoMi/rdsn
Has been migrated to https://github.com/apache/incubator-pegasus/tree/master/rdsn
C++★ 142Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
hitachienergy/epiphany
Cloud and on-premises automation for Kubernetes centered industrial grade solutions.
Python · Jinja★ 142Aug 14, 2026
Apache-2.0Aug 14, 2026 · metrics 2.10.0
RubyGems
11Criticalhealth index
sstephenson/ruby-ejs
EJS (Embedded JavaScript) template compiler for Ruby
Ruby★ 142Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
18Criticalhealth index
ckeditor/ckeditor5-build-classic
The classic editor build of CKEditor 5.
HTML · JavaScript★ 141Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
nette/tokenizer
[DISCONTINUED] Source code tokenizer
PHP★ 141↓ 45.8K/moAug 16, 2026
Custom licenseAug 16, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
plumphp/plum
Plum is a data processing pipeline for PHP.
PHP★ 141↓ 1,632/moAug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
npm
21At Riskhealth index
fjc0k/taro-axios
在 Taro 中使用 axios。
TypeScript★ 140↓ 667/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
npm
54Moderatehealth index
jshttp/proxy-addr
Determine address of proxied request
JavaScript★ 140↓ 381M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
speechbrain/benchmarks
This repository contains the SpeechBrain Benchmarks
Python★ 140Aug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Fallen-Breath/PCRC
PyCraft based Replay Client
Python★ 139Aug 23, 2026
Apache-2.0Aug 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
auth0/node-samlp
SAML Protocol support for node (only IdP for now)
JavaScript★ 139↓ 114K/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
sstephenson/hike
A Ruby library for finding files in a set of paths
Ruby★ 139Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
12Criticalhealth index
Shazwazza/ClientDependency
DEPRECATED. A library for managing CSS & JavaScript dependencies and optimization in ASP.Net
C# · JavaScript★ 138Aug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0
12Criticalhealth index
hypriot/rpi-kernel
Build a Linux kernel for Raspberry Pi 0/1/2/3/3B+
Shell★ 138Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
joseph-roitman/pytest-snapshot
A plugin for snapshot testing with pytest.
Python★ 138↓ 2.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
14Criticalhealth index
withspectrum/draft-js-markdown-plugin
An opinionated DraftJS plugin for supporting Markdown syntax shortcuts
JavaScript★ 138↓ 2,434/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
19Criticalhealth index
ampproject/remapping
Remap sequential sourcemaps through transformations to point at the original source code
TypeScript · JavaScript★ 137↓ 146M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
istanbuljs/v8-to-istanbul
convert from v8 coverage format to istanbul's format
JavaScript★ 137↓ 176M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
Go
18Criticalhealth index
secrethub/secrethub-cli
A secrets management platform that every engineer can use with minimal code changes.
Go★ 137Aug 25, 2026
Apache-2.0Aug 25, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
0xMiden/crypto
Cryptographic primitives used in Polygon Miden rollup
Rust★ 136Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
imanghafoori1/laravel-smart-facades
Strategy design pattern in laravel, the easiest way.
PHP★ 136↓ 16.2K/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
Go
20At Riskhealth index
jbarone/ghostToHugo
Convert Ghost blog export to Hugo posts
Go★ 136Aug 14, 2026
MITAug 14, 2026 · metrics 2.10.0
npm
18Criticalhealth index
darkskyapp/translations
translate Dark Sky API summaries into any language
JavaScript★ 135Jul 24, 2026
BSD-2-ClauseJul 24, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
dcjones/coitrees
A very fast interval tree data structure
Rust★ 135↓ 5,041/moAug 18, 2026
MITAug 18, 2026 · metrics 2.10.0
Go
18Criticalhealth index
dimchansky/utfbom
Detection of the BOM and removing as necessary
Go★ 135Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
dotnet/SyndicationFeedReaderWriter
A .NET Standard Library for reading and writing RSS 2.0 and ATOM 1.0 syndication feeds
C#★ 135Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
36Weakhealth index
quanxiang-cloud/quanxiang
QuanXiang is a powerful, pluggable open source low-code platform used to assist in building various types of digital applications for enterprises.
Mustache★ 135Aug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0