Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,777
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,384 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
gajus/table
Formats data into a string table.
TypeScript★ 973↓ 89.9M/moAug 31, 2026
Custom licenseAug 31, 2026 · metrics 2.10.0
Packagist
12Criticalhealth index
PHP-CS-Fixer/diff
Diff implementation
PHP★ 971↓ 596.4K/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
npm
23At Riskhealth index
estools/estraverse
ECMAScript JS AST traversal functions
JavaScript★ 969↓ 873M/moAug 4, 2026
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
PyPI
59Moderatehealth index
pycountry/pycountry
A Python library to access ISO country, subdivision, language, currency and script definitions and their translations.
Python★ 969↓ 39.8M/moAug 27, 2026
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jorisroovers/gitlint
Linting for your git commit messages
Python★ 967↓ 1.3M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
DelSkayn/rquickjs
High level bindings to the quickjs javascript engine
Rust★ 964↓ 1.6M/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
16Criticalhealth index
grinev/opencode-telegram-bot
OpenCode mobile client via Telegram: run and monitor AI coding tasks from your phone while everything runs locally on your machine. Scheduled tasks support.
TypeScript★ 962↓ 3,767/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
rockchip-linux/rknn-toolkit
No repository description published.
Python · Shell★ 959Aug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
Go
25At Riskhealth index
posener/complete
bash completion written in go + bash completion for go command
Go★ 958Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Maven · RubyGems
22At Riskhealth index
LucasGGamerM/moshidon
Better modification of the official Mastodon for Android app
Java★ 957Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
yabeda-rb/yabeda
Extendable framework for collecting and exporting metrics from your Ruby application
Ruby★ 957Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
26At Riskhealth index
noolsjs/nools
Rete based rules engine written in javascript
JavaScript★ 955Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
16Criticalhealth index
loresoft/msbuildtasks
The MSBuild Community Tasks Project is an open source project for MSBuild tasks.
C#★ 954Jul 18, 2026
BSD-2-ClauseJul 18, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
weppos/breadcrumbs_on_rails
A simple Ruby on Rails plugin for creating and managing a breadcrumb navigation.
Ruby★ 954Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
dom4j/dom4j
flexible XML framework for Java
Java★ 951Jul 30, 2026
Custom licenseJul 30, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/AEADs
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
Rust★ 949↓ 13.3M/moAug 6, 2026
No licenseAug 6, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
shetabit/payment
simple laravel payment package , supports multiple drivers
PHP · Blade★ 948↓ 7,018/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
djlint/djLint
HTML template formatter and linter for Django, Jinja, Twig, Nunjucks, Handlebars, Liquid, Go templates, Mustache, Tera, Askama and Angular. Formats markup and template syntax together, and lints for accessibility, correctness and style. CLI, pre-commit hook and VS Code extension.
Python★ 947↓ 3.2M/moAug 27, 2026
GPL-3.0Aug 27, 2026 · metrics 2.10.0
npm
30At Riskhealth index
tracespace/tracespace
⚡️generate beautiful and accurate SVG renders of printed circuit boards
TypeScript · PLSQL★ 945↓ 218K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
uber/uReplicator
Improvement of Apache Kafka Mirrormaker
Java★ 936Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
uniVocity/univocity-parsers
uniVocity-parsers is a suite of extremely fast and reliable parsers for Java. It provides a consistent interface for handling different file formats, and a solid framework for the development of new parsers.
Java★ 935Aug 21, 2026
Custom licenseAug 21, 2026 · metrics 2.10.0
Maven · Go · npm
34At Riskhealth index
operator-framework/java-operator-sdk
Java SDK for building Kubernetes Operators
Java★ 934Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
Incenteev/ParameterHandler
Composer script handling your ignored parameter file
PHP★ 931↓ 372.5K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
npm
38Weakhealth index
oozcitak/xmlbuilder-js
An XML builder for node.js
CoffeeScript★ 927↓ 312M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Adamant-im/adamant
ADAMANT Blockchain Node
JavaScript★ 926Aug 4, 2026
GPL-3.0Aug 4, 2026 · metrics 2.10.0
Go
34At Riskhealth index
segmentio/asm
Go library providing algorithms optimized to leverage the characteristics of modern CPUs
Go · Assembly★ 925Jul 28, 2026
MIT-0Jul 28, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
google/visqol
Perceptual Quality Estimator for speech and audio
C++ · Python★ 923Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
35Weakhealth index
sindresorhus/object-assign
ES2015 Object.assign() ponyfill
JavaScript★ 918↓ 627M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0