Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,811
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,435 recordsRanked by popularity · browse by tag · record statistics
Go
16Criticalhealth index
go-pdf/fpdf
A PDF document generator with high level support for text, drawing and images
Go★ 641Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
29At Riskhealth index
mfogel/polygon-clipping
Apply boolean polygon clipping operations (union, intersection, difference, xor) to your Polygons & MultiPolygons.
JavaScript★ 641↓ 3.7M/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
22At Riskhealth index
Frissi0n/GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Python★ 639Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
25At Riskhealth index
omichelsen/compare-versions
Compare semver version strings to find which is greater, equal or lesser.
TypeScript★ 637↓ 63M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
pnpnpn/timeout-decorator
Timeout decorator for Python
Python★ 637↓ 3.8M/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
facade/ignition-contracts
The contracts used to display solutions on Ignition and Flare
PHP★ 636↓ 2.3M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
RubyGems
62Moderatehealth index
puppetlabs/facter
Collect and display system facts
Ruby★ 634Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
53Moderatehealth index
all-contributors/app
🤖 A GitHub App to automate acknowledging contributors to your open source projects
JavaScript★ 632Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
46Weakhealth index
gorilla/rpc
Package gorilla/rpc is a golang foundation for RPC over HTTP services.
Go★ 631Sep 23, 2026
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
RubyGems
36Weakhealth index
paul/progress_bar
A Ruby terminal progress_bar
Ruby★ 631Sep 11, 2026
WTFPLSep 11, 2026 · metrics 2.10.0
npm
29At Riskhealth index
l3tnun/EPGStation
Mirakurun を使用した録画管理ソフト
TypeScript · Vue★ 629Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
16Criticalhealth index
mohae/deepcopy
Deep copy things
Go★ 629Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
liufengyun/hashdiff
Hashdiff is a ruby library to to compute the smallest difference between two hashes
Ruby★ 628Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
c-w/ghp-import
Easily import docs to your gh-pages branch.
Python★ 627↓ 13.1M/moOct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
35Weakhealth index
clbanning/mxj
Decode / encode XML to/from map[string]interface{} (or JSON); extract values with dot-notation paths and wildcards. Replaces x2j and j2x packages.
Go★ 627Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
crates.io
43Weakhealth index
seanmonstar/num_cpus
Get the number of CPUs in Rust
Rust★ 627↓ 28.6M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
23At Riskhealth index
org-roam/org-roam-bibtex
Org Roam integration with bibliography management software
Emacs Lisp★ 626Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
—
15Criticalhealth index
getumbrel/umbrel-os
umbrelOS development has moved to https://github.com/getumbrel/umbrel
Shell★ 625Sep 11, 2026
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
PyPI
68Goodhealth index
mozilla/django-csp
Content Security Policy for Django.
Python★ 624↓ 4M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
Behat/MinkExtension
Mink extension (tight integration and configuration) for Behat
PHP★ 621↓ 53.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
25At Riskhealth index
jmespath/go-jmespath
Golang implementation of JMESPath.
Go★ 621Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
29At Riskhealth index
openzipkin/zipkin-go
Zipkin distributed tracing library for go.
Go★ 619Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
RubyGems
42Weakhealth index
lautis/uglifier
Ruby wrapper for UglifyJS JavaScript compressor.
JavaScript · Ruby★ 618Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
41Weakhealth index
piotrmurach/rspec-benchmark
Performance testing matchers for RSpec
Ruby★ 618Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
23At Riskhealth index
pkg/browser
Package browser provides helpers to open files, readers, and urls in a browser window.
Go★ 618Oct 20, 2026
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
tenderlove/rails_autolink
The auto_link function from Rails
Ruby★ 618Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Packagist · npm
37Weakhealth index
ebess/advanced-nova-media-library
A Laravel Nova field for displaying, creating, updating and ordering a Spatie Media Library model.
Vue · PHP★ 616↓ 102.8K/moOct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
crates.io · npm
42Weakhealth index
RReverser/serde-wasm-bindgen
Native integration of Serde with wasm-bindgen
Rust★ 614↓ 4.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
glejeune/Ruby-Graphviz
[MIRROR] Ruby interface to the GraphViz graphing tool
Ruby★ 614Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0