Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,671
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,579 recordsRanked by popularity · browse by tag · record statistics
—
27At Riskhealth index
JuliaMath/TensorCore.jl
Lightweight package for sharing tensor-algebra definitions
Julia★ 50Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
10Criticalhealth index
ModuleArt/ferny
Chromium-based web browser, built on top of Electron.
JavaScript · CSS · HTML★ 50Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
40Weakhealth index
Spomky-Labs/aes-key-wrap
Pure PHP library for AES Key Wrapping (RFC3394 and RFC5649)
PHP★ 50↓ 611.2K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
25At Riskhealth index
TykTechnologies/api-to-mcp
Turn any API to MCP tool
TypeScript★ 50Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
19Criticalhealth index
absmach/supermq
Industrial IoT Messaging and Device Management Platform
Go★ 50Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
baby-markt/deepl-php-lib
🧠 DeepL API Client Library supporting PHP >= 7.3
PHP★ 50↓ 447/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Hex
19Criticalhealth index
beam-community/ua_parser
UserAgentParser implementation for Elixir
Elixir · CSS★ 50↓ 34.5K/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
—
20At Riskhealth index
cjheath/polyglot
Augment 'require' to load non-ruby file types
JavaScript · Ruby★ 50Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
dcrec1/conventional-changelog-ruby
Ruby lib and executable to generate a conventional changelog
Ruby★ 50Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
12Criticalhealth index
jenkins-x/jenkins-x-boot-config
the default GitOps source repository for booting up Jenkins X
Shell · Makefile★ 50Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
jethrogb/rust-cexpr
A C expression parser and evaluator
Rust★ 50↓ 19M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
jkuchar/BigFileTools
Manipulate files over 2GB in PHP on all platforms with byte-precision without headache
PHP★ 50↓ 3,367/moSep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
22At Riskhealth index
jonschlinkert/repeat-string
Repeat the given string n times. Fastest implementation for repeating a string (2x faster than the native method)
JavaScript★ 50↓ 84.9M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
microsoft/sarif-python-om
Python classes for the SARIF object model
Python★ 50↓ 2.5M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
NuGet · npm
17Criticalhealth index
stavroskasidis/BlazorDialog
Easy dialog management for Blazor !
HTML · C# · CSS★ 50Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
25At Riskhealth index
vweevers/hallmark
Markdown Style Guide, with linter and automatic fixer.
JavaScript★ 50↓ 3,440/moOct 18, 2026
GPL-3.0Oct 18, 2026 · metrics 2.10.0
—
25At Riskhealth index
JuliaData/PooledArrays.jl
A pooled representation for arrays with few unique elements
Julia★ 49Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Go
26At Riskhealth index
TIBCOSoftware/flogo-lib
Project Flogo Library
Go★ 49Oct 5, 2026
BSD-3-ClauseOct 5, 2026 · metrics 2.10.0
npm
24At Riskhealth index
VapiAI/client-sdk-react-native
This package lets you start Vapi calls directly in your React native.
TypeScript★ 49Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
—
26At Riskhealth index
alugowski/task-thread-pool
Fast and lightweight thread pool for C++11 and newer.
C++ · CMake★ 49Sep 11, 2026
BSD-2-ClauseSep 11, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
arcnmx/serde-value
Serialization value trees
Rust★ 49↓ 10.3M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
37Weakhealth index
eclipse-ecal/tcp_pubsub
📦 TCP based publish-subscribe library for C++ 🌐
C++★ 49Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
—
48Weakhealth index
hashgraph/hedera-protobufs
Authoritative source of Hedera protobufs
Shell★ 49Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
12Criticalhealth index
jonschlinkert/is-windows
Returns true if the platform is Windows (and Cygwin or MSYS/MinGW for unit tests)
JavaScript★ 49↓ 131M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
orta/gh_inspector
A gem that makes it easy to find existing issues for exceptions via GitHub issues
Ruby★ 49Oct 26, 2026
MITOct 26, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
phpsa/laravel-api-controller
Laravel Api Quickstart
PHP★ 49↓ 290/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
—
20At Riskhealth index
qu1x/huawei-wmi
Sets group write privileges and reinstates battery charge-thresholds.
Makefile · Shell★ 49Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0