Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,414
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,754 recordsRanked by popularity · browse by tag · record statistics
—
20At Riskhealth index
monochromegane/go-gitignore
A fast gitignore matching library for Go.
Go★ 63Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
—
23At Riskhealth index
aedobbyn/covid19us
R package for the COVID Tracking Project API providing US COVID-19 data
R★ 62Oct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
jcb91/jupyter_highlight_selected_word
Jupyter notebook extension that enables highlighting every instance of the current word in the notebook
JavaScript · Python★ 62↓ 372.1K/moOct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
thk1/send_wrapper
No repository description published.
Rust★ 62↓ 3.9M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
10XGenomics/lz4-rs
Rust LZ4 bindings
Rust★ 61↓ 10.9M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
getflywheel/local-components
Reusable React components to use in Local by Flywheel!
TypeScript · MDX · SCSS★ 61↓ 8,463/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
phensley/cldr-engine
Internationalization and localization in Typescript with Unicode CLDR, batteries included
TypeScript★ 60↓ 234.1K/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
WildGums/Orc.FilterBuilder
WPF UI to help users build collection filters
C#★ 59Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
18Criticalhealth index
libp2p/go-tcp-transport
An implementation of a libp2p transport using tcp
Go★ 59Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
renegade-fi/ark-mpc
A framework for SPDZ-style maliciously-secure MPC.
Rust★ 59↓ 22/moOct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
28At Riskhealth index
tobozo/YAMLDuino
YAML <=> JSON converter for ESP32, ESP8266, RP2040 and possibly other devices
C · C++★ 59Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
Lucretiel/autocommand
Autocommand turns a python function into a CLI program
Python★ 57↓ 1.6M/moOct 20, 2026
LGPL-3.0Oct 20, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
SSheldon/rust-block
Rust interface for Apple's C language extension of blocks.
Rust★ 57↓ 3.1M/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
aspect-archives/toolchains_protoc
Pre-built protoc binary toolchain for Bazel, fetched from official protobuf releases
Starlark★ 57Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist · npm
46Weakhealth index
mautic/plugin-grapesjs-builder
GrapesJS HTML and MJML integration for Mautic
PHP · JavaScript★ 57↓ 3,374/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
28At Riskhealth index
colorjs/color-parse
Color string parser
JavaScript★ 56↓ 10.9M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
35Weakhealth index
jpillora/node-glob-all
Provide multiple patterns to node-glob
JavaScript★ 56↓ 1.9M/moOct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
stephenc/jcip-annotations
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
Java★ 56Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
22At Riskhealth index
stevenvachon/relateurl
Create a relative URL with options to minify.
JavaScript★ 56↓ 73M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Composer-Diff
See what packages have changed after `composer update`
PHP★ 55↓ 12.5K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
31At Riskhealth index
PeculiarVentures/xmldsigjs
A TypeScript/JavaScript implementation of XML security standards using Web Crypto API for both browsers and Node.js.
TypeScript★ 55↓ 617.8K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
asahi417/kex
Kex is a python library for unsupervised keyword extraction from a document, providing an easy interface and benchmarks on 15 public datasets.
Python★ 55↓ 27/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
14Criticalhealth index
masterfeizz/EDuke3D
Unofficial port of EDuke32 for the Nintendo 3DS
C★ 55Oct 20, 2026
GPL-2.0Oct 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
mcwhittemore/staged-git-files
Node module that returns a list of files waiting to be committed.
JavaScript★ 55↓ 1.4M/moOct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
Go
14Criticalhealth index
nytimes/gcs-helper
Tool for proxying and mapping HTTP requests to Google Cloud Storage (GCS).
Go★ 55Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
28At Riskhealth index
timoxley/wcwidth
Port of C's wcwidth() and wcswidth()
JavaScript★ 54↓ 204M/moOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
cyteon/discord_gleam
A library to create discord bots in gleam
Gleam★ 53↓ 378/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
21At Riskhealth index
fhs/ZipFile.jl
Read/Write ZIP archives in Julia
Julia★ 53Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0