Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,567
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,242 recordsRanked by popularity · browse by tag · record statistics
11Criticalhealth index
crystal-lang/logger.cr
No repository description published.
Crystal★ 14Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
8Criticalhealth index
defunctzombie/node-stackback
return array of v8 CallSite objects for a stacktrace
JavaScript★ 14Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
18Criticalhealth index
flipperdevices/stm32wb_copro
No repository description published.
C++ · C★ 14Jul 23, 2026
No licenseJul 23, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
haines/yard-relative_markdown_links
A YARD plugin to allow relative links between Markdown files.
Ruby★ 14Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
12Criticalhealth index
kong/kong-plugin-grpc-gateway
Kong Plugin to transcode REST request to gRPC - this plugin has been moved into https://github.com/Kong/kong, please open issues and PRs in that repo
Lua★ 14Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
Go
23At Riskhealth index
puddinging/rime-cli
关于小狼毫输入法的一个小工具
Go★ 14Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pulp/pulp_file
A Pulp plugin that manages File content, e.g. repositories of file content.
Python★ 14Sep 5, 2026
GPL-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
reem/rust-mac
A collection of great and ubiqutitous macros.
Rust★ 14↓ 4.8M/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
xaccefy/pi-xpi
XPI — offensive security tools for Pi Agent: casefile, exploit search, web lookup, code intelligence, todo tracker
TypeScript★ 14↓ 2,871/moSep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
43Weakhealth index
JuliaLang/NetworkOptions.jl
No repository description published.
Julia★ 13Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
17Criticalhealth index
JuliaWeb/HttpParser.jl
Deprecated! Julia wrapper for joyent/http-parser
Julia★ 13Sep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
npm · crates.io
35Weakhealth index
OpenRouterTeam/markdown-wasm
No repository description published.
Rust · TypeScript★ 13↓ 79.2K/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
Go
21At Riskhealth index
Qv2ray/gun-lite
Same gRPC Tunnel, but without gRPC / Protobuf
Go★ 13Aug 14, 2026
MITAug 14, 2026 · metrics 2.10.0
Packagist
46Weakhealth index
Sylius/SyliusShippingBundle
[READ-ONLY] Shipments, shipping methods and categories management for Symfony2.
PHP★ 13↓ 3,974/moSep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
WaffleLapkin/takecell
A cell type which value can only be taken once
Rust★ 13↓ 226.3K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
12Criticalhealth index
beacon-biosignals/OndaFormat
A lightweight format for storing and manipulating sets of multi-sensor, multi-channel, LPCM-encodable, annotated, time-series recordings.
Mixed★ 13Aug 16, 2026
Custom licenseAug 16, 2026 · metrics 2.10.0
Go
13Criticalhealth index
cdktf/cdktf-provider-aws-go
CDK for Terraform Go provider bindings for aws.
Go★ 13Sep 1, 2026
MPL-2.0Sep 1, 2026 · metrics 2.10.0
Go
36Weakhealth index
covalenthq/erigon
Ethereum implementation on the efficiency frontier
Go★ 13Jul 27, 2026
LGPL-3.0Jul 27, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
fact-project/pyfact
A python package with useful methods concernig the FACT-telescope
Python★ 13↓ 343/moAug 25, 2026
No licenseAug 25, 2026 · metrics 2.10.0
25At Riskhealth index
initCommerce/gato
A dart utility library inspired by javascript lodash library.
Dart★ 13Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
runtimeverification/pyk
Python tools for the K Framework
Python★ 13Jul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 2.10.0
npm
21At Riskhealth index
samn/json-stable-stringify
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
JavaScript★ 13↓ 526M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
crates.io
33At Riskhealth index
sgodwincs/dlv-list-rs
No repository description published.
Rust★ 13↓ 7M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
shish/safe
All PHP functions, rewritten to throw exceptions instead of returning false
PHP★ 13↓ 25.2K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Packagist
46Weakhealth index
stellarwp/validation
An end-to-end ready PHP validation library
PHP★ 13↓ 7,515/moAug 26, 2026
GPL-2.0Aug 26, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
tormol/encode_unicode
A rust library for converting between UTF-8, UTF-16 and UTF-32 characters.
Rust★ 13↓ 12.8M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0