Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,611
Monthly downloads under inspection
558B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,456 recordsRanked by popularity · browse by tag · record statistics
20At Riskhealth index
mwitkow/go-conntrack
Go middleware for net.Conn tracking (Prometheus/trace)
Go★ 269Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
Chi-teck/drupal-code-generator
A code generator for Drupal.
PHP★ 268↓ 984.1K/moAug 8, 2026
GPL-2.0Aug 8, 2026 · metrics 2.10.0
npm
20At Riskhealth index
wowserhq/wowser
World of Warcraft in the browser using JavaScript and WebGL
JavaScript★ 268↓ 33/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
neos/neos-ui
Neos CMS UI written in ReactJS with Immutable data structures.
TypeScript · JavaScript · PHP★ 267↓ 15.2K/moSep 5, 2026
GPL-3.0Sep 5, 2026 · metrics 2.10.0
Go
33At Riskhealth index
spf13/jwalterweatherman
So you always leave a note
Go★ 267Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
input-output-hk/rust-cardano
rust client libraries to deal with the current cardano mainnet (byron / cardano-sl)
Rust · C★ 266Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
jshttp/etag
Create simple HTTP ETags
JavaScript★ 266↓ 413M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
matrix-org/matrix-python-sdk
Matrix Client-Server SDK for Python 2 and 3
Python★ 266Jul 31, 2026
Apache-2.0Jul 31, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
mbk-dev/okama
Investment portfolio and stocks analyzing tools for Python with free historical data
Python★ 266Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
ARM-software/SCP-firmware
This System Control Processor (SCP) firmware repository is no longer used and has been set to Read-only for archiving purposes. Please refer to the following active repository.
C★ 265Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
crates.io
43Weakhealth index
KokaKiwi/rust-hex
A basic crate to encode values to hexadecimal representation. Originally extracted from rustc-serialize.
Rust★ 265↓ 41.8M/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
9Criticalhealth index
VahidN/DNTCaptcha.Core
DNTCaptcha.Core is a captcha generator and validator for ASP.NET Core applications
SCSS · HTML · JavaScript★ 265Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
PyPI
7Criticalhealth index
emmetio/sublime-text-plugin
The essential toolkit for web-developers
Python★ 265Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
npm
34At Riskhealth index
radix-ng/primitives
Headless, signals-first UI primitives for Angular. Accessible. Customizable.
TypeScript★ 265↓ 9,283/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
PyPI
53Moderatehealth index
machow/quartodoc
Generate API documentation with quarto
Python★ 264Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
nox/serde_urlencoded
x-www-form-urlencoded meets Serde
Rust★ 264↓ 35.7M/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openpmix/openpmix
OpenPMIx Project Repository
C★ 264Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
bigdata-ustc/EduKTM
The Model Zoo of Knowledge Tracing Models
Python★ 263Aug 15, 2026
Apache-2.0Aug 15, 2026 · metrics 2.10.0
19Criticalhealth index
timescale/helm-charts
Configuration and Documentation to run TimescaleDB in your Kubernetes cluster
Shell · Smarty · Mustache★ 262Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
19Criticalhealth index
timescale/timescaledb-kubernetes
Configuration and Documentation to run TimescaleDB in your Kubernetes cluster
Shell · Smarty · Mustache★ 262Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
16Criticalhealth index
aymerick/douceur
A simple CSS parser and inliner in Go
Go★ 261Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Maven
21At Riskhealth index
os72/protoc-jar-maven-plugin
Protocol Buffers protobuf maven plugin - based on protoc-jar multi-platform executable protoc JAR
Java★ 261Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
tokio-rs/tls
A collection of Tokio based TLS libraries.
Rust★ 261↓ 15.2M/moAug 11, 2026
MITAug 11, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
ruby-grape/grape-swagger-rails
Swagger UI as Rails Engine for grape-swagger gem.
Ruby · JavaScript · TypeScript★ 260Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-apidoc
API documentation generator
HTML · PHP★ 260↓ 4,114/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
kornelski/http-cache-semantics
RFC 7234 in JavaScript. Parses HTTP headers to correctly compute cacheability of responses, even in complex cases
JavaScript★ 259↓ 224M/moAug 4, 2026
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
Maven
13Criticalhealth index
javaee/servlet-spec
The API and Issue Tracker for the JCP Standard Java Servlet Specification
Java★ 258Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
railsware/rack_session_access
Rack middleware that provides access to rack.session environment
Ruby★ 258Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0