Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,670
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,239 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
lddubeau/saxes
An evented streaming XML parser in JavaScript
TypeScript★ 84Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
RubyGems
14Criticalhealth index
dominikh/filesize
filesize is a small ruby class for handling filesizes with both the SI and binary prefixes, allowing conversion from any size to any other size.
Ruby★ 83Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
25Criticalhealth index
gulpjs/glob-parent
Extract the non-magic parent path from a glob string.
JavaScript★ 83↓ 1.3B/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Go
36At riskhealth index
hashicorp/packer-plugin-qemu
Packer plugin for QEMU Builder
Go · MDX★ 83Jul 19, 2026
MPL-2.0Jul 19, 2026 · metrics 1.13.0
crates.io
26Criticalhealth index
itrous/bsl-analyzer
Анализатор кода BSL (1С:Предприятие) с поддержкой LSP. Написан на Rust.
Rust★ 83Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
25Criticalhealth index
xssnick/tonutils-storage
TON Storage golang implementation
Go★ 83Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
ehabterra/apispec
APISpec - Generate OpenAPI 3.1 specs from Go code with intelligent framework detection and call graph analysis. Supports Gin, Echo, Chi, Fiber, and net/http.
Go★ 82Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
rust-lang/jobserver-rs
No repository description published.
Rust★ 81↓ 34.3M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
skycoin/skywire
Skywire Node implementation
Go★ 81Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm · RubyGems
36At riskhealth index
fingerprintjs/fingerprintjs-pro-react-native
Official React Native client for Fingerprint. 100% accurate device identification for fraud detection.
TypeScript · JavaScript★ 80↓ 51.7K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
crates.io
36At riskhealth index
leo91000/graphile_worker_rs
High performance Rust/PostgreSQL job queue (also suitable for getting jobs generated by PostgreSQL triggers/functions out into a different work queue)
Rust★ 80↓ 3,466/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
26Criticalhealth index
lpil/glance
👁️‍🗨️ A Gleam source code parser, in Gleam!
Gleam★ 80Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
nodelib/nodelib
Monorepo for NodeLib libraries
TypeScript · JavaScript★ 80Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
krowinski/bcmath-extended
Extends php BCMath lib for missing functions like floor, ceil, round, abs, min, max, rand for big numbers. Also wraps existing BCMath functions.
PHP★ 79↓ 31.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
28Criticalhealth index
basho/mochiweb
a branch of Mochi Media's excellent HTTP library -- their canonical source can be found at https://github.com/mochi/mochiweb
Erlang★ 78Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
mosquito/caio
Linux AIO c python bindings
C · Python★ 78Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
llblab/pi-telegram
Telegram runtime adapter for Pi
TypeScript★ 76↓ 8,553/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
1inch/fusion-sdk
No repository description published.
TypeScript★ 75↓ 76K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
codecov/codecov-ruby
Ruby uploader for Codecov
Ruby★ 75Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
dotzero/git-profile
↔️ Git Profile helps you manage multiple Git identities and switch between them per repository
Go★ 75Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
mostafaznv/larupload
Larupload is an ORM based file uploader for laravel to upload image, video, audio and other known files.
PHP★ 75↓ 22.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
flachesis/gemini-rust
A comprehensive Rust client library for Google's Gemini.
Rust★ 74↓ 5,093/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
marcalexiei/eslint-zod
ESLint plugin that adds custom linting rules to enforce best practices when using Zod
TypeScript★ 74Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/rbac
Role based access control
PHP★ 74↓ 10.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
codeigniter4/queue
Queues for the CodeIgniter 4 framework
PHP★ 73↓ 14.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
duncan3dc/fork-helper
A PHP helper to fork processes and allow multi-threading
PHP★ 73↓ 7,907/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
elevenlabs/cli
Command Line Interface to interact with ElevenLabs voice agents
TypeScript★ 73↓ 18.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
16Criticalhealth index
Swyftx/crypto-address-validator
Useful library for validation of Bitcoin, Litecoin, Ethereum and other cryptocoin addresses
JavaScript★ 72↓ 18.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
31At riskhealth index
annetutil/gnetcli
The ultimate solution for CLI automation in Golang
Go★ 71Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
awcodes/shout
A simple inline contextual notice for Filament forms and infolist, basically just a fancy placeholder.
PHP · Blade★ 71↓ 35K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0