Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,928
Monthly downloads under inspection
651B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,325 recordsRanked by popularity · browse by tag · record statistics
RubyGems
25At Riskhealth index
nebulab/erb-formatter
Format ERB files with speed and precision
Ruby★ 196Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytest-dev/pytest-repeat
pytest plugin for repeating test execution
Python★ 196↓ 11.6M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
30At Riskhealth index
tapjs/stack-utils
Captures and cleans stack traces.
JavaScript★ 196↓ 206M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
19Criticalhealth index
vmware-tanzu/tanzu-framework
Tanzu Framework provides a set of building blocks to build atop of the Tanzu platform and leverages Carvel packaging and plugins to provide users with a much stronger, more integrated experience than the loose coupling and stand-alone commands of the previous generation of tools.
Go★ 196Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
basepom/duplicate-finder-maven-plugin
Maven plugin to find duplicate classes or resources
Java · Groovy★ 195Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
50Moderatehealth index
linxGnu/gosmpp
Smpp (3.4) Client Library for Go
Go · C++★ 195Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
25At Riskhealth index
litixsoft/karma-mocha-reporter
Karma reporter plugin with mocha style logging.
JavaScript★ 195↓ 1.6M/moOct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
smol-rs/async-broadcast
Async broadcast channels
Rust★ 195↓ 10.7M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
Pythe1337N/garmin-connect
Makes it simple to interface with Garmin Connect to get or set any data point.
TypeScript★ 194↓ 18.6K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
byrnereese/mkdocs-minify-plugin
A mkdocs plugin to minify the HTML of a page before it is written to disk.
Python★ 194↓ 714.5K/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
npm
20At Riskhealth index
davisjam/safe-regex
Detect possibly catastrophic, exponential-time regular expressions
JavaScript★ 194↓ 71.4M/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
14Criticalhealth index
jackc/pgconn
No repository description published.
Go★ 194Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
41Weakhealth index
piotrmurach/tty-box
Draw various frames and boxes in your terminal window
Ruby★ 194Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
23At Riskhealth index
FredKSchott/rollup-plugin-polyfill-node
A modern Node.js polyfill for your Rollup bundle.
TypeScript · JavaScript★ 193↓ 1.2M/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
—
19Criticalhealth index
PX4/PX4-Matrix
Lightweight, dependency free Matrix library (BSD)
C++★ 193Sep 11, 2026
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
Go
13Criticalhealth index
google/shlex
Automatically exported from code.google.com/p/go-shlex
Go★ 193Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
40Weakhealth index
kitar/laravel-dynamodb
A DynamoDB based Eloquent model and Query builder for Laravel.
PHP★ 193↓ 28K/moOct 8, 2026
MITOct 8, 2026 · metrics 2.10.0
—
24At Riskhealth index
TheDoctor0/zip-release
GitHub action that can be used to create release zip archive.
Shell★ 192Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
VaasuDevanS/cowsay-python
The famous cowsay 🐮 for GNU/Linux is now available for python
Python★ 192↓ 1.3M/moSep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
npm
20At Riskhealth index
browserify/path-browserify
The path module from Node.js for browsers
JavaScript★ 192↓ 167M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
fluent/sigdump
Use signal to show stacktrace of a Ruby process without restarting it
Ruby★ 192Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
ruby-concurrency/thread_safe
Thread-safe collections for Ruby (merged with concurrent-ruby)
Java · Ruby★ 192Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
thephpleague/omnipay-stripe
Stripe driver for the Omnipay PHP payment processing library
PHP★ 192↓ 269.6K/moOct 8, 2026
MITOct 8, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
Amber-MD/pytraj
Python interface of cpptraj
Jupyter Notebook · Python★ 191↓ 610/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
SchedMD/slurm-gcp
Slurm on Google Cloud Platform
HCL · Python★ 191Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
alchemy-fr/BinaryDriver
Binary driver utilities
PHP★ 191↓ 62.5K/moSep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
eggjs/bin
egg developer tool
TypeScript★ 191Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
20At Riskhealth index
mafintosh/duplexify
Turn a writable and readable stream into a streams2 duplex stream with support for async initialization and streams1/streams2 input
JavaScript★ 191↓ 137M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
suds-community/suds
Suds is a lightweight SOAP python client for consuming Web Services. A community fork of the jurko fork.
Python★ 191Sep 12, 2026
LGPL-3.0Sep 12, 2026 · metrics 2.10.0