Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,609
Monthly downloads under inspection
579B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,504 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At Riskhealth index
yiisoft/translator
Message translation
PHP★ 26↓ 30.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Go
11Criticalhealth index
Antonboom/errname
The Golang linter that checks that sentinel errors are prefixed with the `Err` and error types are suffixed with the `Error` or `Errors`.
Go★ 25Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
NetApp/eseries-perf-analyzer
This project provides an automated installation and deployment of Grafana, NetApp E-Series Web Services, and supporting software for performance monitoring of NetApp E-Series Storage Systems.
Python · Shell★ 25Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
SimonSapin/rust-utf8
Incremental, zero-copy UTF-8 decoding for Rust
Rust★ 25↓ 18M/moAug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
crates.io
40Weakhealth index
Yuri6037/time-tz
Implementation of tz database (IANA) for time Rust crate.
Rust★ 25↓ 159.2K/moSep 7, 2026
BSD-3-ClauseSep 7, 2026 · metrics 2.10.0
21At Riskhealth index
adshao/brc-721
BRC-721: Non-Fungible Tokens on the Bitcoin Network
Mixed★ 25Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
23At Riskhealth index
arcanis/jest-pnp-resolver
Transparently adds support for Plug'n'Play to Jest
JavaScript★ 25↓ 166M/moAug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0
19Criticalhealth index
arduino/ArduinoModule-CMSIS-Atmel
Atmel Smart ARM devices CMSIS module for Arduino IDE
C★ 25Aug 22, 2026
BSD-2-ClauseAug 22, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
axypro/sourcemap
Work with JavaScript/CSS Source Map in PHP
PHP★ 25↓ 10.3K/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Maven
9Criticalhealth index
dddqmmx/arirang
An Xposed module focused on privacy protection, restricting unnecessary access to sensitive device data and minimizing user tracking through API abuse
Kotlin · C++★ 25Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
delimitry/compressed_rtf
Compressed Rich Text Format (RTF) compression and decompression in Python
Python★ 25↓ 7.4M/moAug 19, 2026
MITAug 19, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
elastic/enterprise-search-php
Elastic Enterprise Search Official PHP Client
PHP★ 25↓ 12.8K/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
26At Riskhealth index
indutny/hmac-drbg
JS-only Hmac DRBG implementation
JavaScript★ 25↓ 51.5M/moAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
14Criticalhealth index
iv-org/lsquic.cr
Crystal bindings to LiteSpeed QUIC
Crystal★ 25Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
jtg-gg/node-webkit
Call all Node.js modules directly from DOM and enable a new way of writing applications with all Web technologies.
C++★ 25Aug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
18Criticalhealth index
labplus-cn/mkfatfs
A tools use for pack/unpack flash file system.
C · C++★ 25Sep 5, 2026
No licenseSep 5, 2026 · metrics 2.10.0
crates.io · npm · PyPI
19Criticalhealth index
mattrglobal/ffi-bbs-signatures
An FFI wrapper around the implementation of BBS+ signatures in Ursa
Rust · Objective-C · C#★ 25Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.10.0
26At Riskhealth index
ndmitchell/derive
A Haskell program and library to derive instances for data types
TeX · Haskell★ 25Aug 5, 2026
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
neos/fusion-afx
[READ-ONLY] JSX inspired compact syntax for Neos.Fusion
PHP★ 25↓ 15.9K/moSep 9, 2026
GPL-3.0Sep 9, 2026 · metrics 2.10.0
14Criticalhealth index
omarroth/lsquic.cr
Crystal bindings to LiteSpeed QUIC
Crystal★ 25Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
crates.io · PyPI
19Criticalhealth index
paiml/trueno
MOVED → https://github.com/paiml/aprender (crates/aprender-compute)
Rust★ 25↓ 903/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
phpowermove/docblock
PHP DocBlock parser and generator. An API to read and write DocBlocks.
PHP★ 25↓ 1.2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
ruby-concurrency/atomic
Atomic references for Ruby (merged with concurrent-ruby)
Ruby · Java · C★ 25Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
ruby/set
This library provides the Set class, which deals with a collection of unordered values with no duplicates.
Ruby★ 25Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 2.10.0
Go
37Weakhealth index
sivchari/containedctx
containedctx is a linter that detects struct contained context.Context field
Go★ 25Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
wasix-org/static-web-server
A blazing fast and asynchronous web server for static files-serving. ⚡
Rust★ 25Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
wirenboard/homeui
Wiren Board web interface
TypeScript · Jinja★ 25↓ 14/moAug 9, 2026
MITAug 9, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/widget
Widgets are reusable building blocks used to create complex and configurable user interface elements in an object-oriented fashion
PHP★ 25↓ 11.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
Alexhuszagh/minimal-lexical
Minimal float parser primitives with a focus on compile times.
Rust★ 24↓ 31.3M/moAug 3, 2026
Custom licenseAug 3, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Alwatr/alwatr
The Alwatr Developer Kit is a comprehensive ecosystem designed to facilitate your development process. It comprises a diverse range of tools and libraries, empowering you to construct robust applications with enhanced efficiency.
TypeScript · JavaScript★ 24↓ 1,083/moAug 8, 2026
MPL-2.0Aug 8, 2026 · metrics 2.10.0