Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,124
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
642 recordsRanked by popularity · browse by tag · record statistics
npm
18Criticalhealth index
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
TypeScript★ 407↓ 134M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
NuGet
6Criticalhealth index
AlexanderPro/WindowTextExtractor
WindowTextExtractor allows you to get a text from any window of an operating system including asterisk passwords
C#★ 393Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
gtk-rs/gtk-rs-core
Rust bindings for GNOME libraries
Rust★ 373↓ 17.2M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/MACs
Message authentication code algorithms written in pure Rust
Rust★ 372↓ 51.3M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
phpspec/php-diff
A comprehensive library for generating differences between two strings in multiple formats (unified, side by side HTML etc). Based on the difflib implementation in Python
PHP★ 359↓ 671.9K/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ioBroker/ioBroker.zigbee
Zigbee communcation with Hue, Xiaomi, Lighttify... via TI CC2xxx USB stick
JavaScript · HTML★ 327↓ 6,133/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/stream-ciphers
Collection of stream cipher algorithms
Rust★ 325↓ 44.3M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
Go · npm · RubyGems
34At Riskhealth index
werf/trdl
The universal solution for delivering your software updates securely from a trusted The Update Framework (TUF) repository.
Go★ 308Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
shetabit/multipay
simple PHP payment package , supports multiple drivers
PHP★ 302↓ 15.8K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
6Criticalhealth index
floatdrop/require-from-string
Load module from string
JavaScript★ 298↓ 479M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
carbon-design-system/carbon-for-ibm-dotcom
Carbon for IBM.com is based on the Carbon Design System for IBM
TypeScript · JavaScript · HTML★ 294↓ 29.3K/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
Calabonga/Microservice-Template
Templates for microservice architecture. Nimble Microservice Framework contains two modules. The first with OpenIddict and the second without OpenIddict. Templates are built on ASP.NET Core platform with different versions Core3.1, NET6, NET7 and NET8. You can create a new project extremely fast: in Visual Studio, Rider, dotnet CLI.
C#★ 287Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
FirelyTeam/spark
Firely and Incendi's open source FHIR server
C#★ 284Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
VahidN/DNTPersianUtils.Core
DNTPersianUtils.Core is a collection of Persian helper extension methods
C#★ 276Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
Chi-teck/drupal-code-generator
A code generator for Drupal.
PHP★ 268↓ 1.1M/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
5Criticalhealth index
VisionVerse/RemoteSensing-Restoration-Survey
[ISPRS 2026] Remote Sensing Image Dehazing: A Systematic Review of Progress, Challenges, and Prospects
Python★ 254Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
consta-design-system/uikit
No repository description published.
TypeScript · MDX★ 249Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
DmitryTsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
Ruby★ 245Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
5Criticalhealth index
VisionVerse/Awesome-RGBT
RGB-T Fusion, RGB-T SOD, RGB-T Vehicle Detection, RGB-T Crowd Counting, RGB-T Pedestrian Detection, RGB-T Semantic Segmeantaion, RGB-T Tracking
Mixed★ 237Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go · npm
13Criticalhealth index
alchemmist/lazy-tmux
Lazy tmux it is a fast session manager and saver for tmux. You can save all your session and lazy restore it.
Go★ 232Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
34At Riskhealth index
scalameta/sbt-scalafmt
sbt plugin for Scalafmt
Scala★ 229Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
3Criticalhealth index
VisionVerse/Blind-Motion-Deblurring-Survey
Deep learning in motion deblurring: current status, benchmarks and future prospects[J], The Visual Computer, 2024.
Python · MATLAB★ 225Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
7Criticalhealth index
0x4f53/Wristkey
A free and open-source 2FA app for smartwatches.
Kotlin★ 220Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist · npm
8Criticalhealth index
zoonru/puphpeteer
A Puppeteer bridge for PHP, supporting the entire API.
PHP · TypeScript★ 210↓ 22.6K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
AdguardTeam/Scriptlets
AdGuard scriptlets library
JavaScript · TypeScript★ 197↓ 11.9K/moSep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm · PyPI
7Criticalhealth index
pomo-mondreganto/ForcAD
Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
Python · Vue★ 185Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
31At Riskhealth index
qbs/qbs
Modern build tool for software projects
C++ · C★ 181Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-coding-standards
Yii 2 coding standards
PHP★ 181↓ 31.6K/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
6Criticalhealth index
osminogin/docker-tor-simple
Simplest minimal container for Tor anonymity software based on Alpine
Dockerfile · Makefile★ 180Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-sphinx
Yii 2 Sphinx extension.
PHP★ 179↓ 12K/moSep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0