Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,830
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,990 recordsRanked by popularity · browse by tag · record statistics
Packagist
51Moderatehealth index
php-http/message
HTTP Message related tools
PHP★ 1,313↓ 7.4M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
googlearchive/PyDrive
Google Drive API Python wrapper library
Python★ 1,312Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
—
34At Riskhealth index
oleg-shilo/wixsharp
Framework for building a complete MSI or WiX source code by using script files written with C# syntax.
C#★ 1,311Oct 11, 2026
MITOct 11, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
samg/diffy
Easy Diffing in Ruby
Ruby★ 1,307Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/kayenta
Automated Canary Service
Java · Scala★ 1,307Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pahaz/sshtunnel
SSH tunnels to remote server.
Python★ 1,305↓ 15.3M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
square/cane
Code quality threshold checking as part of your build
Ruby★ 1,305Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
21At Riskhealth index
YuzuJS/setImmediate
A cross-browser implementation of the new setImmediate API.
JavaScript★ 1,303↓ 216M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · Maven
19Criticalhealth index
SonarSource/SonarJS
SonarSource Static Analyzer for JavaScript and TypeScript
TypeScript · Java★ 1,302↓ 5,757/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
27At Riskhealth index
mirror-engine/the-mirror
V1, Mirror Classic. V2, Mirror Engine: Join Discord for access.
GDScript · TypeScript★ 1,302Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
41Weakhealth index
isaacs/node-graceful-fs
fs with incremental backoff on EMFILE
JavaScript★ 1,301↓ 742M/moSep 16, 2026
BlueOak-1.0.0Sep 16, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
moonshine-software/moonshine
Laravel Admin panel and more. Simple for beginners and powerful for experts. Using Blade, Alpine.js and Tailwind CSS.
PHP · Blade★ 1,301↓ 13.1K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
46Weakhealth index
gulpjs/vinyl
Virtual file format.
JavaScript★ 1,294↓ 32.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
40Weakhealth index
liady/webpack-node-externals
Easily exclude node modules in Webpack
JavaScript★ 1,293↓ 41.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mb21/panwriter
Markdown editor with pandoc integration and paginated preview.
TypeScript · CSS★ 1,293Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
27At Riskhealth index
felixge/node-dateformat
A node.js package for Steven Levithan's excellent dateFormat() function.
JavaScript★ 1,292↓ 113M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
vercel/arg
Simple argument parsing
JavaScript★ 1,292↓ 369M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
23At Riskhealth index
P1-Team/AlliN
A flexible scanner
Python★ 1,287Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
NuGet
38Weakhealth index
mmanela/diffplex
DiffPlex is Netstandard 2.0+ C# library to generate textual diffs.
C# · Less · HTML★ 1,285Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
nicodv/kmodes
Python implementations of the k-modes and k-prototypes clustering algorithms, for clustering categorical data
Python★ 1,285↓ 350.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
fazibear/colorize
Ruby string class extension. It add some methods to set color, background color and text effect on console easier using ANSI escape sequences.
Ruby★ 1,284Sep 12, 2026
GPL-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
koalalorenzo/python-digitalocean
🐍🐳 Python module to manage Digital Ocean droplets
Python★ 1,284↓ 154K/moSep 17, 2026
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
Anorov/PySocks
A SOCKS proxy client and wrapper for Python.
Python★ 1,281↓ 51.2M/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mikeal/watch
Utilities for watching file trees in node.js
JavaScript · Shell★ 1,279↓ 3M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
Nyholm/psr7
A super lightweight PSR-7 implementation
PHP★ 1,278↓ 13.4M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
MarshalX/yandex-music-api
Неофициальная Python библиотека для работы с API сервиса Яндекс.Музыка
Python★ 1,276↓ 15K/moOct 10, 2026
LGPL-3.0Oct 10, 2026 · metrics 2.10.0
RubyGems
37Weakhealth index
davetron5000/gli
Make awesome command-line applications the easy way
Ruby★ 1,274Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
d3/d3-hierarchy
2D layout algorithms for visualizing hierarchical data.
JavaScript★ 1,273↓ 92.2M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
styleguidist/react-docgen-typescript
A simple parser for react properties defined in typescript instead of propTypes.
TypeScript★ 1,266↓ 69M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
29At Riskhealth index
favadi/protoc-go-inject-tag
Inject custom tags to protobuf golang struct
Go★ 1,264Oct 20, 2026
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0