Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,911
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,156 recordsRanked by popularity · browse by tag · record statistics
npm
16Criticalhealth index
PeterMu/nodebatis
A sql style orm lib for nodejs. (similar to mybatis on java)
JavaScript★ 35↓ 168/moOct 26, 2026
No licenseOct 26, 2026 · metrics 2.10.0
npm
34At Riskhealth index
algolia/algolia-sitemap
a node library allowing you to generate sitemaps from an Algolia index.
JavaScript★ 35↓ 35.3K/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
azat-io/eslint-config
🧚‍♀ ESLint sharable config
TypeScript★ 35↓ 4,330/moOct 26, 2026
MITOct 26, 2026 · metrics 2.10.0
Go
8Criticalhealth index
cnaize/meds
Meds — Hybrid firewall using public blocklists
Go★ 35Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
eyre-rs/indenter
Display trait indentation helper for errors
Rust★ 35Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
forcedotcom/lightning-language-server
LWC and Aura Language Servers - shipped as part of the Salesforce VSCode Extensions
JavaScript · TypeScript★ 35↓ 6,322/moSep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
idlesign/deflacue
Cue Sheet driven FLAC audio splitter
Python★ 35↓ 1,022/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
—
31At Riskhealth index
inie0722/air-ctl
C Language Template Library C语言 模板库
C · C++★ 35Sep 13, 2026
BSL-1.0Sep 13, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
jinko-core/jinko
Jinko is a small and safe interpreted language with fast Rust and C FFI
Rust★ 35Sep 13, 2026
GPL-2.0Sep 13, 2026 · metrics 2.10.0
npm
20At Riskhealth index
jonschlinkert/global-modules
Returns the directory used by NPM for globally installed NPM packages.
JavaScript★ 35↓ 119M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jslicense/spdx-correct.js
correct invalid SPDX identifiers
JavaScript★ 35↓ 154M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
justdmitry/PassKitHelper
Helper library for all your Apple PassKit (Apple Wallet, Apple Passbook) needs.
C#★ 35Oct 16, 2026
MITOct 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-router
Flexible routing for PSR-7 applications
PHP★ 35↓ 695.4K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
micktwomey/pyiso8601
ISO8601 formatted datetime parser for python
Python · Just★ 35↓ 9.4M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
npm
22At Riskhealth index
oci-labs/pdfjs-dist-viewer-min
Minified build of PDF.js library including the viewer.
CSS · HTML★ 35↓ 2,877/moOct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
—
13Criticalhealth index
rega-cev/virulign
VIRULIGN: fast codon-correct alignment and annotation of viral genomes
C · C++★ 35Oct 23, 2026
GPL-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
snudler6/time-travel
python time libraries mocking
Python★ 35↓ 34/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
umbrellio/laravel-ltree
LTree Extension (PostgreSQL) for Laravel
PHP★ 35↓ 1,309/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
crates.io
24At Riskhealth index
CaveNightingale/uuid-remapper
No repository description published.
Rust★ 34Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Go
23At Riskhealth index
MatthiasScholz/cos
Basic Cluster Orchestration Setup
HCL · Shell · Go★ 34Oct 26, 2026
LGPL-3.0Oct 26, 2026 · metrics 2.10.0
—
21At Riskhealth index
PagerDuty/pdagent
The PagerDuty Agent is a program that lets you easily integrate your monitoring system with PagerDuty.
Python · Shell★ 34Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm · Maven · RubyGems
28At Riskhealth index
Qudaeo/react-native-yamap-plus
Библиотека для интеграции Yandex MapKit SDK в React Native
Kotlin · Objective-C++ · TypeScript★ 34↓ 3,669/moSep 26, 2026
No licenseSep 26, 2026 · metrics 2.10.0
Hex · RubyGems
35Weakhealth index
activesphere/exq-scheduler
Job scheduler for Exq
Elixir★ 34↓ 3,784/moOct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
allure-framework/allure-php-api
PHP API for Allure Framework
PHP★ 34↓ 45.8K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
43Weakhealth index
archiverjs/node-crc32-stream
a streaming CRC32 checksumer (now with deflate support)
JavaScript★ 34↓ 146M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
barneygale/pathlib-abc
Python base classes for rich path objects
Python★ 34↓ 14.1M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
Hex
31At Riskhealth index
bitwalker/picosat_elixir
Elixir + Erlang bindings for the PicoSAT solver
C★ 34↓ 64.3K/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
25At Riskhealth index
calvinmetcalf/process-nextick-args
process.nextTick always accepts args, always
JavaScript★ 34↓ 311M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0