Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,511
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,555 recordsRanked by popularity · browse by tag · record statistics
Go
17Criticalhealth index
rancher-archives/hypper
No repository description published.
Go★ 69Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
RubyGems
24At Riskhealth index
rubyworks/hashery
Facets Hashery Collection of Hash-based classes
Ruby★ 69Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
16Criticalhealth index
shibukawa/oktavia
Full text search engine for JS environments
JavaScript★ 69Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
17Criticalhealth index
sindresorhus/semver-diff
Get the diff type of two semver versions: 0.0.1 0.0.2 → patch
JavaScript · TypeScript★ 69↓ 40.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
14Criticalhealth index
3dmind/jest-sonar-reporter
A Sonar test reporter for Jest.
JavaScript★ 68↓ 1.8M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
Go · npm
18Criticalhealth index
Altinity/altinity-dashboard
Altinity Dashboard helps you manage ClickHouse installations controlled by clickhouse-operator.
TypeScript · Go★ 68Oct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
—
12Criticalhealth index
KittyMac/Sextant
High performance JSONPath queries for Swift
Swift★ 68Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
—
57Moderatehealth index
ROCm/hipSPARSE
[DEPRECATED] Moved to ROCm/rocm-libraries repo
C++ · C★ 68Oct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
23At Riskhealth index
UCLOrengoGroup/cath-tools
Protein structure comparison tools such as SSAP and SNAP
C++ · Promela★ 68Oct 22, 2026
GPL-3.0Oct 22, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
agentmail-to/agentmail-python
No repository description published.
Python★ 68↓ 1.3M/moSep 25, 2026
MITSep 25, 2026 · metrics 2.10.0
npm
26At Riskhealth index
microstates/ember
@microstates/ember - Official Microstates bindings for Ember.js
JavaScript · HTML · CSS★ 68↓ 238/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
38Weakhealth index
mixmaxhq/search-string
Another simple parser for advanced search query syntax.
TypeScript★ 68↓ 32.5K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
32At Riskhealth index
otterize/credentials-operator
Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud
Go★ 68Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
piotrmurach/tty-file
File manipulation utility methods
Ruby★ 68Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
prawnpdf/prawn-templates
Experimental extraction of template features from Prawn
Ruby★ 68Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
30At Riskhealth index
purescript/purescript-record
Functions for working with records and polymorphic labels
PureScript★ 68Sep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
RubyGems
9Criticalhealth index
sstephenson/ruby-eco
Ruby Eco Compiler
Ruby★ 68Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
yujinakayama/astrolabe
An object-oriented Ruby AST extension for Parser
Ruby★ 68Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
AOMediaCodec/av1-isobmff
Official specification of the AOM group for the carriage of AV1 in ISOBMFF
HTML★ 67Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Flagsmith/flagsmith-js-client
Javascript Client for Flagsmith. Ship features with confidence using feature flags and remote config. Host yourself or use our hosted version at https://www.flagsmith.com/
TypeScript★ 67↓ 601.8K/moSep 15, 2026
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
aesara-devs/aeppl
Tools for an Aesara-based PPL.
Python★ 67Oct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
npm
18Criticalhealth index
cowboy/node-exit
A replacement for process.exit that ensures stdio are fully drained before exiting.
JavaScript★ 67↓ 124M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
17Criticalhealth index
fjc0k/mounted
基于 Taro 的小程序组件库。
TypeScript · CSS★ 67↓ 67/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
17Criticalhealth index
glenselle/nACH2
nACH is a highly customizable Node.js module exposing a high & low-level API for generating ACH files for use within the ACH network
JavaScript★ 67Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
—
19Criticalhealth index
jaegertracing/jaeger-lib
A collection of shared infrastructure libraries used by different components of Jaeger.
Go★ 67Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
lava-nc/lava-optimization
Neuromorphic mathematical optimization with Lava
Jupyter Notebook · Python★ 67↓ 33/moOct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
nixpulvis/oursh
Your comrade through the perilous world of UNIX.
Rust★ 67↓ 1/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
36Weakhealth index
open-draft/strict-event-emitter
Type-safe EventEmitter for browser and Node.js.
TypeScript★ 67↓ 87.2M/moSep 23, 2026
No licenseSep 23, 2026 · metrics 2.10.0
Hex
36Weakhealth index
phoenixframework/phoenix_view
View abstraction for Phoenix v1.0-v1.6
Elixir★ 67↓ 560.7K/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0