Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,772
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,136 recordsRanked by popularity · browse by tag · record statistics
RubyGems
36Weakhealth index
shrinerb/content_disposition
Ruby gem to create HTTP Content-Disposition headers with proper escaping/encoding of filenames
Ruby★ 25Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
37Weakhealth index
sivchari/containedctx
containedctx is a linter that detects struct contained context.Context field
Go★ 25Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
smarie/python-decopatch
python decorators made easy.
Python★ 25↓ 1.2M/moOct 19, 2026
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
taiga-family/toolkit
ESlint, Stylelint, Prettier and more tools
TypeScript★ 25↓ 60.3K/moSep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
wasix-org/static-web-server
A blazing fast and asynchronous web server for static files-serving. ⚡
Rust★ 25Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
32At Riskhealth index
wikimedia/service-runner
Generic nodejs service supervisor
JavaScript★ 25↓ 2,592/moOct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
wirenboard/homeui
Wiren Board web interface
TypeScript · Jinja★ 25Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/widget
Widgets are reusable building blocks used to create complex and configurable user interface elements in an object-oriented fashion
PHP★ 25↓ 14.8K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Alwatr/alwatr
The Alwatr Developer Kit is a comprehensive ecosystem designed to facilitate your development process. It comprises a diverse range of tools and libraries, empowering you to construct robust applications with enhanced efficiency.
TypeScript · JavaScript★ 24↓ 615/moSep 17, 2026
MPL-2.0Sep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
Azure/terraform-azurerm-hubnetworking
Terraform verified module for deploying multi-hub & spoke architectures
HCL · Go★ 24Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
Backs/Collections.Analyzer
Roslyn-based diagnostics for collections.
C#★ 24Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
ConradIrwin/interception
Listen to raise in ruby
Ruby · C★ 24Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
36Weakhealth index
KeisukeYamashita/go-vcl
🐇 VCL parser written in Go
Go★ 24Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
MetaMask/abi-utils
Lightweight utilities for encoding and decoding Solidity ABI
TypeScript★ 24↓ 1.1M/moSep 28, 2026
Apache-2.0Sep 28, 2026 · metrics 2.10.0
Go · npm
12Criticalhealth index
VKCOM/tl
No repository description published.
C++ · Go★ 24Oct 20, 2026
MPL-2.0Oct 20, 2026 · metrics 2.10.0
—
20At Riskhealth index
browsermt/marian-dev
Fast Neural Machine Translation in C++ - development repository
C++★ 24Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
—
25At Riskhealth index
bruceiv/egg
C++11 Parsing Expression Grammar Generator
C++★ 24Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems · npm
23At Riskhealth index
davidwessman/syntax_tree-erb
Syntax Tree support for ERB
Ruby★ 24Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dfinance/dvm
dfinance Virtual Machine for Move language
Rust★ 24Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
dspinhirne/netaddr-rb
A Ruby library for performing calculations on IPv4 and IPv6 subnets.
Ruby★ 24Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
glebm/popper_js-rubygem
Popper.js assets as a Ruby gem. https://popper.js.org/
Ruby★ 24Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
23At Riskhealth index
istanbuljs/append-transform
handle multiple require hooks
JavaScript★ 24↓ 29M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
25At Riskhealth index
jonschlinkert/arr-union
Returns an array of unique values using strict equality for comparisons, maintaining the same order as the provided arrays.
JavaScript★ 24↓ 54.8M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
31At Riskhealth index
jonschlinkert/expand-tilde
Bash-like tilde expansion for node.js. Expands a leading tilde in a file path to the user home directory, or `~+` to the cwd.
JavaScript★ 24↓ 67.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/union-value
Set an array of unique values as the property of an object. Supports setting deeply nested properties using using object-paths/dot notation. Node.js/JavaScript util.
JavaScript★ 24↓ 42.3M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
28At Riskhealth index
jsonjoy-com/json-pack
Fastest JSON serialization in native JavaScript. Works in browser and Node.js
TypeScript★ 24Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
28At Riskhealth index
knownasilya/cli-width
Fallback to a default if `process.stdout.getWindowSize` doesn't exist
JavaScript★ 24↓ 282M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
knu/webrobots
A Ruby library to help write robots.txt compliant web robots
Ruby★ 24Sep 11, 2026
BSD-2-ClauseSep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
lidofinance/ui
React UI Components for Lido projects.
TypeScript★ 24↓ 5,792/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0