Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,763
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,460 recordsRanked by popularity · browse by tag · record statistics
npm
20At Riskhealth index
canfoundation/cif-js
No repository description published.
TypeScript★ 2↓ 145/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
3Criticalhealth index
choitjddn0311/choitjddn0311
No repository description published.
Mixed★ 2Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
claricle/vectory
Convert between vector image formats (Ruby)
Ruby★ 2Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
npm
3Criticalhealth index
TypeScript · MDX★ 2Aug 2, 2026
Custom licenseAug 2, 2026 · metrics 2.10.0
PyPI
9Criticalhealth index
critical-path/stakeholders
Manage stakeholders like a pro!
Python · HTML★ 2Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
curvefi/curve-llamalend.js
No repository description published.
TypeScript★ 2↓ 12K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
6Criticalhealth index
cuteant/CuteAnt.Extensions
No repository description published.
C#★ 2Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
npm
16Criticalhealth index
cytomine/Cytomine-js-client
Cytomine javascript client
JavaScript★ 2↓ 146/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Maven · RubyGems
30At Riskhealth index
datastax/bookkeeper
Apache Bookkeeper
Java★ 2Aug 26, 2026
Apache-2.0Aug 26, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
deeplycloudy/satpy
Python package for earth-observing satellite data processing
Python★ 2Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/pdf-generator
No repository description published.
TypeScript★ 2↓ 5,833/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
7Criticalhealth index
duolingo/rollbar-ios
Objective-C library for crash reporting and logging with Rollbar.
Objective-C · Ruby★ 2Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
NuGet
37Weakhealth index
eQuantic/core
Implementations based on design patterns
C#★ 2Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
ensi-platform/laravel-openapi-testing
No repository description published.
PHP · Shell★ 2↓ 2,528/moAug 26, 2026
Custom licenseAug 26, 2026 · metrics 2.10.0
Go
23At Riskhealth index
evstack/cometbft
CometBFT: A distributed, Byzantine fault-tolerant, deterministic state machine replication engine, and fork of Tendermint Core.
Go★ 2Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
19Criticalhealth index
expressots/shared
[Moved to expressots/expressots monorepo] Shared library for ExpressoTS modules 🐎
TypeScript · JavaScript★ 2Aug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
23At Riskhealth index
fab2s/FileLock
A fluent Helper to properly handle file locking based on flock()
PHP★ 2↓ 3,305/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
PyPI
1Criticalhealth index
git-hub-yandexlyceum/Emailer
No repository description published.
Python · HTML★ 2Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
Go
26At Riskhealth index
go-toolsmith/astp
Package astp provides AST predicates.
Go★ 2Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
26At Riskhealth index
go-toolsmith/strparse
Package strparse provides convenience wrappers around `go/parser` for simple expr/stmt/decl parsing from string.
Go★ 2Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
26At Riskhealth index
go-toolsmith/typep
Package typep provides type predicates.
Go★ 2Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Hex
30At Riskhealth index
gridpoint-com/ostara
🐇 Transform Ecto schemas into JSON Schemas
Elixir★ 2↓ 2,037/moAug 15, 2026
MITAug 15, 2026 · metrics 2.10.0
npm · Go
20At Riskhealth index
hsanjuan/opencensus-go
A stats collection and distributed tracing framework
Go★ 2Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
26At Riskhealth index
ialexj/terraform-provider-sql
Terraform SQL Migrations with delayed connection
Go★ 2Aug 1, 2026
MPL-2.0Aug 1, 2026 · metrics 2.10.0