Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,928
Monthly downloads under inspection
651B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,325 recordsRanked by popularity · browse by tag · record statistics
Go
25At Riskhealth index
bnb-chain/go-sdk
No repository description published.
Go★ 202Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
gshutler/useragent
HTTP User Agent parser
Ruby★ 202Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
jekyll/jekyll-mentions
:busts_in_silhouette: @mention support for your Jekyll site
Ruby★ 202Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
25At Riskhealth index
TritonDataCenter/node-sshpk
Parse, convert, fingerprint and use SSH keys in pure node.js
JavaScript★ 201Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
hyperium/hyper-tls
No repository description published.
Rust★ 201↓ 17.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
16Criticalhealth index
psaren/taro-ui-vue
UI KIT for Taro/vue
SCSS · Vue · JavaScript★ 201↓ 1,256/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
23At Riskhealth index
unclechu/node-deep-extend
Recursive extend module
JavaScript★ 201↓ 175M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
Nayjest/Grids
Grids framework for Laravel
PHP★ 200↓ 1,458/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
—
25At Riskhealth index
adsabs/adsabs-dev-api
Developer API service description and example client code
Jupyter Notebook★ 200Sep 9, 2026
No licenseSep 9, 2026 · metrics 2.10.0
Maven · npm
54Moderatehealth index
seart-group/ghs
GitHub Search: Platform used to crawl, store and present projects from GitHub, as well as any statistics related to them
Java · HTML★ 200Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
—
18Criticalhealth index
ziglang/zig-pypi
The Zig programming language, packaged for PyPI
Python★ 200Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
CocoaPods/CLAide
A small command-line interface framework.
Ruby★ 199Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
—
35Weakhealth index
Zulu-Inuoe/jzon
A correct and safe(er) JSON RFC 8259 reader/writer with sane defaults.
Common Lisp★ 199Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
arguslab/Argus-SAF
Argus static analysis framework
Scala★ 199Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
32At Riskhealth index
isaacs/node-mkdirp
Recursively mkdir, like `mkdir -p`, but in node.js
TypeScript · JavaScript★ 199↓ 482M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
qawolf/playwright-video
🎬 Save a video of a Playwright page
TypeScript★ 199↓ 29.7K/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
43Weakhealth index
tapjs/signal-exit
when you want to fire an event no matter how a process exits.
TypeScript · JavaScript★ 199↓ 1B/moSep 16, 2026
BlueOak-1.0.0Sep 16, 2026 · metrics 2.10.0
Go
31At Riskhealth index
FactomProject/factomd
Factom Daemon
Go★ 198Oct 17, 2026
Custom licenseOct 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
cloudflare/stream-react
No repository description published.
TypeScript★ 198↓ 751.5K/moOct 11, 2026
BSD-3-ClauseOct 11, 2026 · metrics 2.10.0
npm
32At Riskhealth index
iov-one/iov-core
Client library for secure key management and multi-blockchain communication
JavaScript · TypeScript★ 198↓ 61.6K/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
amygdala-labs/interchaintest
e2e testing framework for the interchain
Go★ 197Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
40Weakhealth index
beautiful-atoms/beautiful-atoms
Python module for drawing and rendering beautiful atoms and molecules using Blender.
Python★ 197↓ 30/moSep 9, 2026
GPL-3.0Sep 9, 2026 · metrics 2.10.0
npm
28At Riskhealth index
d3/d3-path
Serialize Canvas path commands to SVG.
JavaScript★ 197↓ 398M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
—
28At Riskhealth index
dotnet/sdk-container-builds
Libraries and build tooling to create container images from .NET projects using MSBuild
Mixed★ 197Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
kucaahbe/rspec-html-matchers
Old school have_tag, with_tag(and more) matchers for rspec 3 (Nokogiri powered)
Ruby★ 197Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
PyPI · npm
40Weakhealth index
samuelcolvin/smokeshow
create temporary websites
TypeScript · Python · SCSS★ 197Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
wasmCloud/wascc-host
Library for hosting actors and capability providers in a host process
Rust★ 197Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm · PyPI
27At Riskhealth index
METR/task-standard
METR Task Standard
TypeScript · Python★ 196Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Maven · npm
46Weakhealth index
bmwcarit/joynr
A transport protocol agnostic (MQTT, HTTP, WebSockets etc.) Franca IDL based communication framework supporting multiple communication paradigms (RPC, Pub-Sub, broadcast etc.)
Java · C++ · TypeScript★ 196Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0