Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,667
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,804 recordsRanked by popularity · browse by tag · record statistics
Go
21At Riskhealth index
remind101/ssm-env
Expand env variables from AWS Parameter Store
Go★ 258Oct 18, 2026
BSD-2-ClauseOct 18, 2026 · metrics 2.10.0
npm
16Criticalhealth index
dcos/dcos-ui
The UI for The Datacenter Operating System
TypeScript★ 256Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
14Criticalhealth index
orange-cpp/omath
Cross-platform modern general purpose game/mods/cheats development framework written in C++23.
C++★ 255Sep 12, 2026
ZlibSep 12, 2026 · metrics 2.10.0
—
5Criticalhealth index
VisionVerse/RemoteSensing-Restoration-Survey
[ISPRS 2026] Remote Sensing Image Dehazing: A Systematic Review of Progress, Challenges, and Prospects
Python★ 254Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modern-python/that-depends
Simple, typed dependency-injection framework for Python
Python★ 253↓ 44.4K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
consta-design-system/uikit
No repository description published.
TypeScript · MDX★ 249Sep 29, 2026
MITSep 29, 2026 · metrics 2.10.0
Maven
12Criticalhealth index
yandex/yatagan
Dependency Injection framework based on Google's Dagger2 API, optimized for fast builds and for managing large graphs with optional dependencies
Kotlin★ 248Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
plaid/plaid-ruby
Ruby bindings for Plaid
Ruby★ 247Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
32At Riskhealth index
joomcode/redispipe
High-throughput Redis client for Go with implicit pipelining
Go★ 246Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
DmitryTsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
Ruby★ 245Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
chuckremes/ffi-rzmq
FFI bindings for ZeroMQ so the library can be used under JRuby and other FFI-compliant ruby runtimes
Ruby★ 245Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
wallyqs/org-ruby
An Org mode parser written in Ruby.
Ruby★ 245Oct 9, 2026
No licenseOct 9, 2026 · metrics 2.10.0
PyPI
11Criticalhealth index
romis2012/aiohttp-socks
Proxy (HTTP, SOCKS) connector for aiohttp
Python★ 244↓ 5.1M/moSep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
sajya/server
Implement the JSON-RPC 2.0 server specification for @Laravel
PHP★ 242↓ 27.9K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
5Criticalhealth index
VisionVerse/Awesome-RGBT
RGB-T Fusion, RGB-T SOD, RGB-T Vehicle Detection, RGB-T Crowd Counting, RGB-T Pedestrian Detection, RGB-T Semantic Segmeantaion, RGB-T Tracking
Mixed★ 237Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/di
PSR-11 compatible DI container and injector
PHP★ 236↓ 37.6K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
yiisoft/yii2-framework
[READ ONLY] Yii 2 framework core code only. This is a subtree split off the "yii2" repository
PHP★ 234↓ 573.9K/moOct 20, 2026
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go · npm
13Criticalhealth index
alchemmist/lazy-tmux
Lazy tmux it is a fast session manager and saver for tmux. You can save all your session and lazy restore it.
Go★ 232Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
neonxp/MathExecutor
Simple math expresions parser and calculator
PHP★ 231↓ 77.3K/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
34At Riskhealth index
scalameta/sbt-scalafmt
sbt plugin for Scalafmt
Scala★ 229Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
26At Riskhealth index
AlekSi/pointer
Go package pointer provides helpers to get pointers to values of built-in types.
Go★ 227Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
3Criticalhealth index
VisionVerse/Blind-Motion-Deblurring-Survey
Deep learning in motion deblurring: current status, benchmarks and future prospects[J], The Visual Computer, 2024.
Python · MATLAB★ 225Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
7Criticalhealth index
0x4f53/Wristkey
A free and open-source 2FA app for smartwatches.
Kotlin★ 220Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
9Criticalhealth index
yury/cidre
Apple frameworks bindings for rust
Rust★ 220↓ 37.5K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
twirapp/twir
Twitch chat bot written on Golang and TypeScript.
Go · Vue · TypeScript★ 218Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
wp-statistics/GeoLite2-Country
Free MaxMind GeoLite2-Country database for IP geolocation. Ultra-lightweight (~2MB), auto-updated via jsDelivr CDN.
Mixed★ 218↓ 1,899/moOct 23, 2026
No licenseOct 23, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
Laravel-Lang/publisher
Localization publisher for your Laravel application
PHP★ 217↓ 681K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI · crates.io · npm
14Criticalhealth index
zmactep/patinae
A fast, programmable molecular viewer for research, scripting, and the web
Rust★ 217↓ 3,257/moOct 23, 2026
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/db
Yii Database Library
PHP★ 216↓ 27.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0