Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,474
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,808 recordsRanked by popularity · browse by tag · record statistics
npm
35Weakhealth index
pinojs/pino-arborsculpture
🌲 Change Pino log levels in a running process
JavaScript★ 26↓ 9,619/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
31At Riskhealth index
ppillot/biomsalign
JavaScript library for Multiple Sequence Alignment
TypeScript★ 26↓ 37.3K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
19Criticalhealth index
arduino/ArduinoModule-CMSIS-Atmel
Atmel Smart ARM devices CMSIS module for Arduino IDE
C★ 25Oct 20, 2026
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
delimitry/compressed_rtf
Compressed Rich Text Format (RTF) compression and decompression in Python
Python★ 25↓ 6.7M/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
jtg-gg/node-webkit
Call all Node.js modules directly from DOM and enable a new way of writing applications with all Web technologies.
C++★ 25Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
—
18Criticalhealth index
labplus-cn/mkfatfs
A tools use for pack/unpack flash file system.
C · C++★ 25Oct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
neos/fusion-afx
[READ-ONLY] JSX inspired compact syntax for Neos.Fusion
PHP★ 25↓ 18.9K/moOct 23, 2026
GPL-3.0Oct 23, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
smarie/python-decopatch
python decorators made easy.
Python★ 25↓ 1.2M/moOct 19, 2026
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
wirenboard/homeui
Wiren Board web interface
TypeScript · Jinja★ 25Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
ConradIrwin/interception
Listen to raise in ruby
Ruby · C★ 24Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go · npm
12Criticalhealth index
VKCOM/tl
No repository description published.
C++ · Go★ 24Oct 20, 2026
MPL-2.0Oct 20, 2026 · metrics 2.10.0
—
25At Riskhealth index
bruceiv/egg
C++11 Parsing Expression Grammar Generator
C++★ 24Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
28At Riskhealth index
nexdrew/ansi-align
:abcd: align-text with ANSI support for CLIs
JavaScript★ 24↓ 103M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
npm · crates.io
28At Riskhealth index
westrik/mdpdf
Convert Markdown to PDF using a self-contained Rust binary (CLI or Node.js)
Rust · JavaScript★ 24↓ 43.3K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
23At Riskhealth index
whitemech/lydia
A tool for LDLf translation to DFA and for LDLf synthesis.
C++★ 24Oct 22, 2026
LGPL-3.0Oct 22, 2026 · metrics 2.10.0
npm · Go
38Weakhealth index
AstraBert/anydocs
Fetch all the docs you need for your vibe coding projects
Go★ 23↓ 49/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go · npm
28At Riskhealth index
OmarFaruk-0x01/sms-trap
SMS Trap is a fake SMS-sending API that provides a dashboard to view all sent SMS messages
JavaScript · templ★ 23Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
enthought/pywin32-ctypes
A (partial) reimplementation of pywin32 in pure python
Python★ 23↓ 6.1M/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
28At Riskhealth index
gky360/react-ngl
React wrapper for ngl
TypeScript★ 23↓ 39.2K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
28At Riskhealth index
isaacs/color-support
A module which will endeavor to guess your terminal's level of color support.
JavaScript★ 23↓ 79.8M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
npm
16Criticalhealth index
lukasturcani/mol-draw
A lightweight, 3D molecular viewer for JavaScript and PureScript applications.
PureScript · JavaScript★ 23↓ 96/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
moon1ite/koco
Easy installer of kocohub dataset
Python★ 23Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
pear/HTML_QuickForm2
Provides methods to create, validate and render HTML forms in PHP.
PHP · JavaScript★ 23↓ 12.6K/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
privacyidea/simplesamlphp-module-privacyidea
:fish: OTP Two Factor Authentication Module for simpleSAMLphp to run with privacyIDEA
PHP · JavaScript · Twig★ 23↓ 31/moOct 19, 2026
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
RubyGems
24At Riskhealth index
tagomoris/msgpack-inspect
A tool to inspect and dump the MessagePack binary data: msgpack.org[msgpack-inspect]
Ruby★ 23Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
21At Riskhealth index
wj42ftns/replace-in-files
Replace text in one or more files or globs.
JavaScript★ 23↓ 80.5K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
CeresDB/sqlness
An ergonomic, opinionated framework for SQL integration test.
Rust★ 22↓ 5,534/moOct 17, 2026
Apache-2.0Oct 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
Yoast/yoast-components
Accessible React components by Yoast
JavaScript★ 22Oct 18, 2026
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
celestiaorg/celestia-openrpc
OpenRPC client of celestia-node, without dependencies on celestia-node/celestia-app/cosmos-sdk.
Go★ 22Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0