Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,240
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,223 recordsRanked by popularity · browse by tag · record statistics
RubyGems
22At Riskhealth index
dmitry/yandex_mystem
Yandex Mystem makes morphological analysis of a russian text
Ruby★ 30Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
npm
24At Riskhealth index
emilbayes/siginfo
Utility module to print pretty messages on SIGINFO/SIGUSR1
JavaScript★ 30↓ 287M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
npm
23At Riskhealth index
iamolegga/prettier-loader
prettier loader for webpack
JavaScript★ 30↓ 8,940/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
30At Riskhealth index
nishanths/predeclared
Find declarations in Go source code that shadow predeclared identifiers
Go★ 30Sep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
serialport/bindings-cpp
The C++ bindings for the node serialport project.
C++ · TypeScript★ 30↓ 1M/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
sigp/milagro_bls
BLS12-381 cryptography using Apache Milagro
Rust★ 30Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
29At Riskhealth index
JuliaFolds/FoldsThreads.jl
Extra threaded executors for JuliaFolds/*.jl
Julia★ 29Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
46Weakhealth index
JuliaMath/InverseFunctions.jl
Interface for function inversion in Julia
Julia★ 29Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
23At Riskhealth index
gostaticanalysis/analysisutil
Library: Utilities for x/tools/go/analysis package
Go★ 29Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
craftcms/plugin-installer
Composer installer for Craft CMS plugins.
PHP★ 28↓ 53K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
26At Riskhealth index
moricho/tparallel
tparallel finds inappropriate usage of `t.Parallel()` method in your Go test codes
Go★ 28Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go · PyPI
19Criticalhealth index
open-edge-platform/edge-node-agents
Agents installed as system services in the Edge Node OS
Go★ 28Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
25At Riskhealth index
ssgreg/nlreturn
Checks for a new line before return and branch statements.
Go★ 28Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
21At Riskhealth index
ChALkeR/safer-buffer
Modern Buffer API polyfill without footguns
JavaScript★ 27↓ 563M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
deepset-ai/canals
A component orchestration engine
Python★ 27Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
35Weakhealth index
eventualbuddha/lines-and-columns
Maps lines and columns to character offsets and back.
TypeScript★ 27↓ 465M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist · npm
26At Riskhealth index
jfeltkamp/cookiesjsr
Easily expandable cookie consent tool.
JavaScript · Svelte · SCSS★ 27↓ 24K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
njzjz/openbabel-wheel
No repository description published.
CMake · Python★ 27↓ 77.8K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
37Weakhealth index
humanwhocodes/module-importer
Universal importer for CommonJS and ESM in Node.js
JavaScript★ 26↓ 468M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
myrrlyn/wyz
myrrlyn’s wyzyrdly library
Rust★ 26↓ 19.2M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
qwandor/anes-rs
ANSI Escape Sequence provider & parser
Rust★ 26↓ 16.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
tmobile/jazz-installer
Installer for Jazz Serverless Developer Platform!
Python · HCL · JavaScript★ 26Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
SimonSapin/rust-utf8
Incremental, zero-copy UTF-8 decoding for Rust
Rust★ 25↓ 19.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
23At Riskhealth index
arcanis/jest-pnp-resolver
Transparently adds support for Plug'n'Play to Jest
JavaScript★ 25↓ 154M/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
elastic/enterprise-search-php
Elastic Enterprise Search Official PHP Client
PHP★ 25↓ 12.8K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
26At Riskhealth index
ndmitchell/derive
A Haskell program and library to derive instances for data types
TeX · Haskell★ 25Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
phpowermove/docblock
PHP DocBlock parser and generator. An API to read and write DocBlocks.
PHP★ 25↓ 1.4M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
37Weakhealth index
sivchari/containedctx
containedctx is a linter that detects struct contained context.Context field
Go★ 25Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0