Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,575
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,219 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
nanostores/persistent
Smart store for Nano Stores state manager to keep data in localStorage
TypeScript · JavaScript★ 379↓ 418.1K/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiosmtpd
A reimplementation of the Python stdlib smtpd.py based on asyncio.
Python★ 373↓ 1.9M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
19Criticalhealth index
rabbitmq/rabbitmq-management
RabbitMQ Management UI and HTTP API
Erlang · JavaScript · HTML★ 373Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/MACs
Message authentication code algorithms written in pure Rust
Rust★ 371↓ 43.1M/moAug 8, 2026
No licenseAug 8, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
gtk-rs/gtk-rs-core
Rust bindings for GNOME libraries
Rust★ 371↓ 14M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
bytecodealliance/wasi-rs
WASI bindings for Rust
Rust★ 368↓ 49.7M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet
28At Riskhealth index
FontStashSharp/FontStashSharp
C# port of https://github.com/memononen/fontstash
C#★ 365Aug 24, 2026
ZlibAug 24, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
phpspec/php-diff
A comprehensive library for generating differences between two strings in multiple formats (unified, side by side HTML etc). Based on the difflib implementation in Python
PHP★ 361↓ 667.9K/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
PyPI
9Criticalhealth index
vlasovskikh/funcparserlib
Recursive descent parsing library for Python based on functional combinators
Python★ 360↓ 208.3K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
kniengine/kni
KNI is a cross-platform C# game framework.
C#★ 352Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
jkroso/parse-duration
convert a human readable duration to ms
JavaScript★ 347↓ 3.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
34At Riskhealth index
PackageKit/PackageKit
A D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API.
C · C++★ 343Jul 27, 2026
GPL-2.0Jul 27, 2026 · metrics 2.10.0
20At Riskhealth index
pawn-lang/compiler
Pawn compiler for SA-MP with bug fixes and new features - runs on Windows, Linux, macOS
C · Assembly★ 340Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-mongodb
Yii 2 MongoDB extension
PHP★ 332↓ 24.5K/moAug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/stream-ciphers
Collection of stream cipher algorithms
Rust★ 324↓ 31.9M/moAug 8, 2026
No licenseAug 8, 2026 · metrics 2.10.0
34At Riskhealth index
fsprojects/pulsar-client-dotnet
Apache Pulsar native client for .NET (C#/F#/VB)
F# · C#★ 323Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
samueltuoyo15/Dokugen
Lightweight README.md file Generator CLI. It simplifies the process of writing your README.md file from scratch by generating professional README.md files for your projects, saving you time. The idea behind Dokugen is simple but impactful, automate the most neglected part of a repo. The results cleaner projects and happier contributors
TypeScript · Python★ 322Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
audiojs/audio
High-level audio manipulations
JavaScript★ 308↓ 1,013/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
premailer/css_parser
Ruby CSS Parser
Ruby★ 299Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
6Criticalhealth index
floatdrop/require-from-string
Load module from string
JavaScript★ 298↓ 482M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
microsoft/vscode-cordova
A Visual Studio Code extension providing intellisense, debug, and build support for Cordova and Ionic projects.
TypeScript★ 298Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
Packagist
13Criticalhealth index
shetabit/multipay
simple PHP payment package , supports multiple drivers
PHP★ 298↓ 8,136/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
npm
19Criticalhealth index
carbon-design-system/carbon-for-ibm-dotcom
Carbon for IBM.com is based on the Carbon Design System for IBM
TypeScript · JavaScript · HTML★ 293↓ 96.7K/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
Calabonga/Microservice-Template
Templates for microservice architecture. Nimble Microservice Framework contains two modules. The first with OpenIddict and the second without OpenIddict. Templates are built on ASP.NET Core platform with different versions Core3.1, NET6, NET7 and NET8. You can create a new project extremely fast: in Visual Studio, Rider, dotnet CLI.
C#★ 285Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm · PyPI
32At Riskhealth index
rzk-lang/rzk
An experimental proof assistant based on a type theory for synthetic ∞-categories.
Haskell★ 285Jul 28, 2026
No licenseJul 28, 2026 · metrics 2.10.0
7Criticalhealth index
Rirusha/Cassette
Read-only mirror of https://gitlab.gnome.org/Rirusha/Cassette
Vala · Meson · Shell★ 284Aug 1, 2026
GPL-3.0Aug 1, 2026 · metrics 2.10.0
26At Riskhealth index
fsharp/fsharp-compiler-docs
Doc build for FSharp.Compiler.Service
Mixed★ 281Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
VenusProtocol/venus-protocol
BNB Smart Chain Venus Protocol
TypeScript · Solidity★ 278↓ 16.3K/moJul 29, 2026
BSD-3-ClauseJul 29, 2026 · metrics 2.10.0
Go
34At Riskhealth index
PasarGuard/node
PasarGuard Node | Decentralized Censorship-Resistant Access Layer
Go★ 277Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
dodobrands/WebAuthn.Net
WebAuthn (Passkeys) library for .NET.
C#★ 271Sep 7, 2026
MITSep 7, 2026 · metrics 2.10.0