Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,040
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,653 recordsRanked by popularity · browse by tag · record statistics
RubyGems
20Criticalhealth index
lpender/bummr
Update your gems in separate commits. Identify any that fail your build.
Ruby★ 237Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
pillarjs/finalhandler
Node.js final http responder
JavaScript★ 237↓ 510M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
29Criticalhealth index
redis-stack/redis-stack
A Redis server with additional database capabilities powered by Redis modules.
Python★ 236Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/di
PSR-11 compatible DI container and injector
PHP★ 236↓ 41.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Hex
34At riskhealth index
erlef/oidcc
OpenId Connect client library in Erlang & Elixir
Erlang · Elixir★ 235↓ 34.7K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
17Criticalhealth index
getsentry/raven-csharp
Superseded by: https://github.com/getsentry/sentry-dotnet
C#★ 232Jul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 1.13.0
12Criticalhealth index
orange-cpp/omath
Cross-platform modern general purpose game/mods/cheats development framework written in C++23.
C++★ 229Jul 20, 2026
ZlibJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Nyholm/NSA
Writing test code should be simple
PHP★ 228↓ 102K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
Vizonex/Winloop
An Alternative library for uvloop compatability with windows
Cython · Python★ 228Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
30At riskhealth index
ajv-validator/ajv-formats
JSON Schema format validation for Ajv v8+
TypeScript★ 227↓ 440M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
29Criticalhealth index
gecko0307/dlib
Allocators, I/O streams, math, geometry, image and audio processing for D
D★ 226Jul 20, 2026
BSL-1.0Jul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
simple-keyboard/simple-keyboard-layouts
Multi-language virtual keyboard layouts for simple-keyboard
JavaScript · TypeScript★ 225↓ 89.3K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
22Criticalhealth index
isaacs/once
Run a function exactly one time
JavaScript★ 224↓ 542M/moJul 22, 2026
BlueOak-1.0.0Jul 22, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
omarryhan/aiogoogle
Async Google API Client + Async Google Auth
Python★ 224Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
Pylons/hupper
in-process file monitor / reloader for reloading your code automatically during development
Python★ 223Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
19Criticalhealth index
paulirish/html5-boilerplate
THIS REPO HAS MOVED! It has a pretty new home at github.com/h5bp ╰☆╮Please click this link below.
JavaScript★ 223Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
aio-libs/aiohttp-cors
CORS support for aiohttp
Python · HTML★ 220Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
25Criticalhealth index
microflo/microflo
Live dataflow programming for microcontrollers and embedded
CoffeeScript · C++★ 220↓ 268/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
Laravel-Lang/publisher
Localization publisher for your Laravel application
PHP★ 218↓ 460.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · npm
32At riskhealth index
twirapp/twir
Twitch chat bot written on Golang and TypeScript.
Go · Vue · TypeScript★ 218Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
isaacs/yallist
Yet Another Linked List
TypeScript · JavaScript★ 217↓ 1.2B/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
38At riskhealth index
yiisoft/db
Yii Database Library
PHP★ 216↓ 25.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
ckruse/CFPropertyList
Read, write and manipulate both binary and XML property lists as defined by apple
Ruby★ 214Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
grncdr/merge-stream
Merge multiple streams into one interleaved stream
JavaScript★ 212↓ 320M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
25Criticalhealth index
gkz/type-check
a library which allows you to check the types of JavaScript values at runtime with a Haskell like type syntax
LiveScript★ 211↓ 534M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mglaman/phpstan-drupal
Extension for PHPStan to allow analysis of Drupal code.
PHP★ 208↓ 750.5K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
pytest-dev/pytest-order
pytest plugin that allows to customize the test execution order
Python★ 208Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0