Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,788
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,256 recordsRanked by popularity · browse by tag · record statistics
RubyGems
17Criticalhealth index
natalie-lang/natalie_parser
NatalieParser is a zero-dependency, from-scratch, hand-written recursive descent parser for the Ruby Programming Language.
C++ · Ruby★ 63Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
paragonie/corner
Exceptions and Errors made more user-friendly
PHP★ 63↓ 26K/moJul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
npm
16Criticalhealth index
peterszombati/xapi-node
xStation5 Trading API for NodeJS/JS
TypeScript★ 63↓ 2,293/moJul 24, 2026
Custom licenseJul 24, 2026 · metrics 2.10.0
26At Riskhealth index
uskr/jsonrpc-lean
Lightweight, fast, transport-agnostic, c++ implementation of the JSON-RPC 2.0 specification
C++★ 63Aug 1, 2026
LGPL-3.0Aug 1, 2026 · metrics 2.10.0
23At Riskhealth index
aedobbyn/covid19us
R package for the COVID Tracking Project API providing US COVID-19 data
R★ 62Sep 8, 2026
Custom licenseSep 8, 2026 · metrics 2.10.0
npm
32At Riskhealth index
humanwhocodes/retry
A JavaScript utility for retrying async methods that reject errors
JavaScript★ 62↓ 463M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
crates.io
38Weakhealth index
indiv0/lazycell
Rust library providing a lazily filled Cell
Rust★ 62↓ 6.2M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
jcb91/jupyter_highlight_selected_word
Jupyter notebook extension that enables highlighting every instance of the current word in the notebook
JavaScript · Python★ 62Aug 19, 2026
Custom licenseAug 19, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
oneduo/laravel-recaptcha-enterprise
A tiny and simple Laravel wrapper to use Google reCAPTCHA Enterprise v3
PHP★ 62↓ 3,516/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
crates.io
14Criticalhealth index
servo/rust-layers
A GPU-accelerated 2D animation library for Rust
Rust★ 62↓ 3/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
thk1/send_wrapper
No repository description published.
Rust★ 62↓ 3.1M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
10XGenomics/lz4-rs
Rust LZ4 bindings
Rust★ 61↓ 8.6M/moAug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
CakeDC/cakephp-api
API Plugin for CakePHP
PHP★ 61↓ 4,249/moAug 17, 2026
Custom licenseAug 17, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
andhus/dirhash-python
Python module and CLI for hashing of file system directories based on the Dirhash Standard.
Python★ 61↓ 11M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
getflywheel/local-components
Reusable React components to use in Local by Flywheel!
TypeScript · MDX · SCSS★ 61↓ 2,843/moJul 16, 2026
MITJul 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
jshttp/forwarded
Parse HTTP X-Forwarded-For header
JavaScript★ 61↓ 354M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
rnnh/vaporiser
🎵 Creates a vaporwave (slowed, with reverb) remix of a given MP3 file, with the option of playing over a looped GIF as a video.
Python★ 61Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/mimic-response
Mimic a Node.js HTTP response stream
JavaScript★ 61↓ 271M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/front50
Spinnaker Metadata Repository Service
Java · Groovy · Kotlin★ 61Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
trendels/braceexpand
Bash-style brace expansion for Python
Python★ 61↓ 3.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
cosmo0920/win32-api
A different, better variant of the Win32API Ruby library
C · Ruby · Dockerfile★ 60Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
Packagist · npm
50Moderatehealth index
imalhasaranga/PDFLib
A robust PHP library to manipulate PDFs using Ghostscript. Convert PDF to Images, Merge, Split, Encrypt, Watermark, Compress, and more with a simple fluent API.
PHP★ 60↓ 4,135/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
40Weakhealth index
jonschlinkert/fill-range
Fill in a range of numbers or letters, positive or negative, optionally passing an increment or multiplier to use.
JavaScript★ 60↓ 678M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
28At Riskhealth index
mainland/language-c-quote
No repository description published.
Haskell★ 60Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
32At Riskhealth index
rsyslog/libfastjson
a fast json library for C
C★ 60Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0