Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,316
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,077 recordsRanked by popularity · browse by tag · record statistics
crates.io
32At Riskhealth index
tokio-rs/valuable
No repository description published.
Rust★ 255↓ 23.1M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
vfilimonov/co2meter
A Python library for USB CO2 meter
Python★ 255↓ 108/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
5Criticalhealth index
VisionVerse/RemoteSensing-Restoration-Survey
[ISPRS 2026] Remote Sensing Image Dehazing: A Systematic Review of Progress, Challenges, and Prospects
Python★ 254Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
27At Riskhealth index
browserify/node-util
node.js util module as a module
JavaScript★ 254↓ 174M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Packagist · npm
26At Riskhealth index
felixfbecker/php-advanced-json-rpc
A more advanced PHP implementation of the JSONRPC Protocol 📞❗
PHP★ 254↓ 1M/moSep 13, 2026
ISCSep 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pytest-dev/pytest-subtests
unittest subTest() support and subtests fixture
Python★ 254↓ 3.6M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
segiddins/cocoapods-dependencies
Shows a project's CocoaPods dependency graph
Ruby★ 254Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Maven
14Criticalhealth index
ACINQ/eclair-mobile
An Android wallet for the Lightning Network
C★ 253Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
Marwes/schemafy
Crate for generating rust types from a json schema
Rust★ 253↓ 4.5M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
NuGet
17Criticalhealth index
ferram4/Ferram-Aerospace-Research
Aerodynamics model for Kerbal Space Program
C#★ 253Sep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
flyerhzm/uniform_notifier
uniform notifier for rails logger, customized logger, javascript alert, javascript console, growl and xmpp
Ruby★ 253Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
35Weakhealth index
guard/rb-fsevent
FSEvents API with signals handled (without RubyCocoa)
C · Ruby★ 253Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modern-python/that-depends
Simple, typed dependency-injection framework for Python
Python★ 253↓ 44.4K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/orca
Orchestration engine
Java · Groovy · Kotlin★ 253Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Maven
10Criticalhealth index
xolstice/protobuf-maven-plugin
Maven Plugin that executes the Protocol Buffers (protoc) compiler
Java · Groovy★ 253Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
citronneur/rdp-rs
Remote Desktop Protocol in RUST
Rust★ 252↓ 722/moOct 2, 2026
MITOct 2, 2026 · metrics 2.10.0
npm
28At Riskhealth index
mafintosh/pumpify
Combine an array of streams into a single duplex stream using pump and duplexify
JavaScript★ 252↓ 44.2M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
philburk/jsyn
Modular audio synthesizer library with unit generators in Java
Java★ 252Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
RubyGems
27At Riskhealth index
rails/dartsass-rails
Integrate Dart Sass with the asset pipeline in Rails
Ruby · Dockerfile★ 252Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
ConnorAtherton/rb-readline
Pure-Ruby Readline Implementation
Ruby★ 250Sep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist · npm
12Criticalhealth index
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
PHP · Twig★ 250↓ 36.2K/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
npm
26At Riskhealth index
ganesshkumar/obsidian-table-editor
An Obsidian plugin to provide an editor for Markdown tables. It can open CSV data and data from Microsoft Excel, Google Sheets, Apple Numbers and LibreOffice Calc as Markdown tables from Obsidian Markdown editor.
TypeScript★ 250Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
48Weakhealth index
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
JavaScript★ 250↓ 630M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
36Weakhealth index
sindresorhus/load-json-file
Read and parse a JSON file
JavaScript · TypeScript★ 250↓ 92.6M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
consta-design-system/uikit
No repository description published.
TypeScript · MDX★ 249Sep 29, 2026
MITSep 29, 2026 · metrics 2.10.0
npm
27At Riskhealth index
szmarczak/http2-wrapper
Use HTTP/2 the same way like HTTP/1
JavaScript★ 249↓ 120M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
19Criticalhealth index
webpack/image-minimizer-webpack-plugin
Webpack loader and plugin to compress images using imagemin
JavaScript★ 249↓ 765.6K/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
bxparks/bigquery-schema-generator
Generates the BigQuery schema from newline-delimited JSON or CSV data records.
Python★ 248↓ 731.4K/moOct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Maven
12Criticalhealth index
yandex/yatagan
Dependency Injection framework based on Google's Dagger2 API, optimized for fast builds and for managing large graphs with optional dependencies
Kotlin★ 248Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
blue-oil/blueoil
Bring Deep Learning to small devices
Python · C++★ 247Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0