Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,523
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,127 recordsRanked by popularity · browse by tag · record statistics
npm
27At Riskhealth index
ansu5555/pdf-viewer-reactjs
A simple PDF viewer for React js
JavaScript★ 145↓ 10.5K/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
antigenomics/vdjtools
Analysis of immune repertoire sequencing results
Python★ 145↓ 6,634/moSep 14, 2026
GPL-3.0Sep 14, 2026 · metrics 2.10.0
npm
23At Riskhealth index
felixge/node-combined-stream
A stream that emits multiple other streams one after another.
JavaScript★ 145↓ 451M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
20At Riskhealth index
karthikuj/sasori
Sasori is a dynamic web crawler powered by Puppeteer, designed for lightning-fast endpoint discovery.
JavaScript★ 145↓ 29/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
matham/ffpyplayer
A cython implementation of an ffmpeg based player.
Cython★ 145Sep 14, 2026
LGPL-3.0Sep 14, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mcollina/on-exit-leak-free
Execute a function on exit without leaking memory, allowing all objects to be garbage collected
JavaScript★ 145Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Go
26At Riskhealth index
muesli/cancelreader
A cancelable reader for Go
Go★ 145Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
nalgeon/sqlean.py
Python's sqlite3 + extensions
C · Python★ 145Sep 12, 2026
ZlibSep 12, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
pgcodekeeper/pgcodekeeper
Eclipse plugin for database schema management
Java★ 145Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
piotrmurach/tty-pie
Draw pie charts in your terminal window
Ruby★ 145Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
rdohms/phpunit-arraysubset-asserts
Provides assertArraySubset for use in PHPunit
PHP★ 145↓ 520.4K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
42Weakhealth index
teamcapybara/xpath
Ruby library for generating XPath expressions
Ruby★ 145Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
40Weakhealth index
wooorm/import-meta-resolve
Resolve things like Node.js — ponyfill for `import.meta.resolve`
JavaScript★ 145↓ 109M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
—
15Criticalhealth index
SpectralPack/Talisman
A mod to enhance high-scoring runs
Lua★ 144Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
NuGet
25At Riskhealth index
brendanconnolly/Xunit.Categories
Friendlier attributes to help categorize your tests
C#★ 144Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
25At Riskhealth index
calvinmetcalf/immediate
cross browser microtask
JavaScript★ 144↓ 221M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
—
16Criticalhealth index
intel/zlib
No repository description published.
C★ 144Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
RubyGems
27At Riskhealth index
pages-themes/dinky
Dinky is a Jekyll theme for GitHub Pages
SCSS · HTML · Ruby★ 144Sep 10, 2026
CC0-1.0Sep 10, 2026 · metrics 2.10.0
npm
19Criticalhealth index
webpack-contrib/null-loader
[DEPRECATED] A loader that returns an empty module (can still be used for webpack 4).
JavaScript★ 144↓ 7.8M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
25At Riskhealth index
Wikunia/ConstraintSolver.jl
ConstraintSolver in Julia: Blog posts ->
Julia★ 143Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
30At Riskhealth index
eggjs/mock
Mock library for egg testing.
TypeScript★ 143Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
26At Riskhealth index
Java★ 143Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
NuGet
22At Riskhealth index
Polly-Contrib/Polly.Contrib.WaitAndRetry
Polly.Contrib.WaitAndRetry is an extension library for Polly containing helper methods for a variety of wait-and-retry strategies.
C#★ 142Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
Taritsyn/BundleTransformer
Bundle Transformer - a modular extension for System.Web.Optimization (also known as the Microsoft ASP.NET Web Optimization Framework).
JavaScript · C#★ 142Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
VahidN/DNTCommon.Web.Core
DNTCommon.Web.Core provides common scenarios' solutions for ASP.NET Core applications.
C#★ 142Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
19Criticalhealth index
XiaoMi/rdsn
Has been migrated to https://github.com/apache/incubator-pegasus/tree/master/rdsn
C++★ 142Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
containerbuildsystem/dockerfile-parse
Python library for parsing Dockerfile files.
Python★ 142↓ 12.5M/moSep 10, 2026
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
—
17Criticalhealth index
matrix-io/xc3sprog
xc3sprog is a suite of utilities for programming Xilinx FPGAs, CPLDs, and EEPROMs with the Xilinx Parallel Cable and other JTAG adapters under Linux. Used to program the FPGA of the MATRIX Creator/Voice via Raspberry Pi.
C++★ 142Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nanostores/react
React integration for Nano Stores, a tiny state manager with many atomic tree-shakable stores
TypeScript★ 142↓ 3.4M/moOct 10, 2026
MITOct 10, 2026 · metrics 2.10.0
RubyGems
11Criticalhealth index
sstephenson/ruby-ejs
EJS (Embedded JavaScript) template compiler for Ruby
Ruby★ 142Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0