Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,234
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,599 recordsRanked by popularity · browse by tag · record statistics
npm
26At Riskhealth index
jaredhanson/utils-merge
merge() utility function
JavaScript · Makefile★ 69↓ 237M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
murarth/assert_matches
Provides macro `assert_matches` for testing pattern matching
Rust★ 69↓ 3.8M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
17Criticalhealth index
rancher-archives/hypper
No repository description published.
Go★ 69Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
12Criticalhealth index
KittyMac/Sextant
High performance JSONPath queries for Swift
Swift★ 68Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
32At Riskhealth index
ConduitIO/bwlimit
Limit the bandwidth of a connection.
Go★ 66Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
allure-framework/allure-phpunit
Allure integrations for PHP test frameworks: PHPUnit
PHP★ 66↓ 213.2K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
gettext-rs/gettext-rs
GNU Gettext FFI binding for Rust
Rust★ 66↓ 365.2K/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
17Criticalhealth index
radicle-dev/radicle-contracts
Radicle contracts on Ethereum
Solidity · TypeScript★ 66Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io
22At Riskhealth index
alexcrichton/scoped-tls
Scoped Thread Local Storage for Rust
Rust★ 65↓ 11.8M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
asottile-archive/flake8-2020
flake8 plugin which checks for misuse of `sys.version` or `sys.version_info`
Python★ 65Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Hex
25At Riskhealth index
bitwalker/ex_unit_clustered_case
An extension for ExUnit for simplifying tests against a clustered application
Elixir★ 65↓ 331/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
deepset-ai/haystack-experimental
🧪 Experimental features for Haystack
Python★ 65↓ 307.9K/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
22At Riskhealth index
vba-blocks/vba-blocks
A package manager and build tool for VBA
VBA · TypeScript★ 65Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
30At Riskhealth index
JuliaServices/AutoHashEquals.jl
A Julia macro to add == and hash() to composite types.
Julia★ 64Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
37Weakhealth index
sindresorhus/merge-streams
Merge multiple streams into a unified stream
JavaScript★ 64↓ 147M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
28At Riskhealth index
Fractions-DotNet/Fractions
A fraction data type to calculate with rational numbers.
C#★ 63Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
40Weakhealth index
justjs/just
Essential utilities for all your javascript projects.
JavaScript★ 63↓ 75/moSep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
50Moderatehealth index
spdk/dpdk
SPDK mirror of DPDK
C★ 63Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
Packagist
12Criticalhealth index
Automattic/advanced-post-cache
All up in your WP_Query, caching the things.
PHP★ 62↓ 2/moSep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
coniks-sys/coniks-java
A CONIKS implementation in Java
Java★ 62Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
ferrilab/ferrilab
Experimenting with Rust's fundamental data model
Rust★ 62↓ 38.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
42Weakhealth index
humanwhocodes/retry
A JavaScript utility for retrying async methods that reject errors
JavaScript★ 62↓ 453M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
41Weakhealth index
indiv0/lazycell
Rust library providing a lazily filled Cell
Rust★ 62↓ 6.3M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
18Criticalhealth index
react-navigation/core
Core utilities for the react-navigation framework shared between the native and web implementations.
JavaScript★ 62Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
cqframework/cql-engine
Clinical Quality Language Evaluation Engine
Java★ 61Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
decred/politeiagui
No repository description published.
JavaScript★ 61Sep 20, 2026
ISCSep 20, 2026 · metrics 2.10.0
npm
40Weakhealth index
jonschlinkert/fill-range
Fill in a range of numbers or letters, positive or negative, optionally passing an increment or multiplier to use.
JavaScript★ 61↓ 594M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
jshttp/forwarded
Parse HTTP X-Forwarded-For header
JavaScript★ 61↓ 384M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0