Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
36,962
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,224 recordsRanked by popularity · browse by tag · record statistics
crates.io · npm
32At riskhealth index
rari-build/rari
rari: High-performance React Server Components framework powered by a Rust runtime, delivering 18.1x faster response times (0.12ms vs 2.17ms) and 67.4x higher throughput (97,826 vs 1,452 req/sec) than Next.js with zero-config setup.
Rust · TypeScript★ 1,165Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
daddyz/phonelib
Ruby gem for phone validation and formatting using google libphonenumber library data
Ruby★ 1,162Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
36At riskhealth index
meziantou/Meziantou.Analyzer
A powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices—helping developers and AI write more reliable code.
C#★ 1,161Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
isaacs/sax-js
A sax style parser for JS
JavaScript★ 1,159↓ 337M/moJul 22, 2026
BlueOak-1.0.0Jul 22, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
scoder/lupa
Lua in Python
Python · Cython★ 1,148↓ 30.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
james2m/seedbank
Seedbank gives your seed data a little structure. Create seeds for each environment, share seeds between environments and specify dependencies to load your seeds in order. All nicely integrated with simple rake tasks.
Ruby★ 1,144Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
29Criticalhealth index
proengsoft/laravel-jsvalidation
Laravel Javascript Validation
PHP · JavaScript★ 1,141↓ 30.8K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
NuGet
24Criticalhealth index
dadhi/DryIoc
DryIoc is fast, small, full-featured IoC Container for .NET
C#★ 1,128Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
python-validators/validators
Python Data Validation for Humans™.
Python★ 1,120↓ 30.1M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Hex
41At riskhealth index
uwiger/gproc
Extended process registry for Erlang
Erlang★ 1,096↓ 506.4K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
werf/nelm
Nelm is a Helm 4 alternative. It is a Kubernetes deployment tool that manages Helm Charts and deploys them to Kubernetes. The Nelm goal is to provide a modern alternative to Helm, with long-standing issues fixed and many new major features introduced.
Go★ 1,094Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
NuGet
18Criticalhealth index
gmamaladze/globalmousekeyhook
This library allows you to tap keyboard and mouse, detect and record their activity even when an application is inactive and runs in background.
C#★ 1,092Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
peterbe/premailer
Turns CSS blocks into style attributes
Python★ 1,085Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
flipperdevices/flipperzero-ufbt
Compact tool for building and debugging applications for Flipper Zero.
Python★ 1,068Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
crates.io · npm
49At riskhealth index
codemod/codemod
The CLI for codemods: scaffold, share, and run multi-step transformations of any size. First-class ast-grep support. Fast, reliable, polyglot.
Rust★ 1,054↓ 1/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Maven
37At riskhealth index
Kotlin/dataframe
Kotlin DataFrame: typesafe in-memory structured data processing for JVM
Kotlin★ 1,052Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
NuGet
18Criticalhealth index
samcook/RedLock.net
An implementation of the Redlock algorithm in C#
C#★ 1,051Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
PyPI
18Criticalhealth index
python-hyper/hyper
HTTP/2 for Python.
Python★ 1,050Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
22Criticalhealth index
igrigorik/em-synchrony
Fiber aware EventMachine clients and convenience classes
Ruby★ 1,035Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
39At riskhealth index
gravity-ui/uikit
No repository description published.
TypeScript · SCSS★ 1,016↓ 83.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
40At riskhealth index
brunofacca/active-record-query-trace
Rails plugin that logs/displays a backtrace of all SQL queries executed by Active Record
Ruby★ 1,007Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
25Criticalhealth index
rsl/stringex
Some [hopefully] useful extensions to Ruby’s String class. It is made up of three libraries: ActsAsUrl [permalink solution with better character translation], Unidecoder [Unicode to Ascii transliteration], and StringExtensions [miscellaneous helper methods for the String class].
Ruby★ 984Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Maven · RubyGems
23Criticalhealth index
LucasGGamerM/moshidon
Better modification of the official Mastodon for Android app
Java★ 957Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
—
16Criticalhealth index
loresoft/msbuildtasks
The MSBuild Community Tasks Project is an open source project for MSBuild tasks.
C#★ 954Jul 18, 2026
BSD-2-ClauseJul 18, 2026 · metrics 1.13.0
PyPI · npm
39At riskhealth index
djlint/djLint
✨ HTML Template Linter and Formatter. Django - Jinja - Nunjucks - Handlebars - GoLang
Python★ 938↓ 3.2M/moJul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Maven · Go · npm
49At riskhealth index
operator-framework/java-operator-sdk
Java SDK for building Kubernetes Operators
Java★ 934Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Maven · npm
34At riskhealth index
julianpoy/RecipeSage
A Collaborative Recipe Keeper, Meal Planner, and Shopping List Organizer in PWA form.
TypeScript · HTML★ 923Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
Go
28Criticalhealth index
mattn/go-isatty
No repository description published.
Go★ 920Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0