Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,206
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,475 recordsRanked by popularity · browse by tag · record statistics
PyPI
16Criticalhealth index
google/python-subprocess32
A backport of the Python 3 subprocess module for use on Python 2.
Python · C★ 173↓ 664.1K/moOct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
27At Riskhealth index
micromatch/to-regex-range
Pass two numbers, get a regex-compatible source string for matching ranges. Fast compiler, optimized regex, and validated against more than 2.78 million test assertions. Useful for creating regular expressions to validate numbers, ranges, years, etc.
JavaScript★ 173↓ 601M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
unshiftio/querystringify
Querystringify - Small, simple but powerful query string parser.
JavaScript★ 173↓ 168M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
FuelLabs/fuel-bridge
The canonical Fuel bridge mono repo.
TypeScript · Rust · Solidity★ 172Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
aave/aave-utilities
No repository description published.
TypeScript★ 172↓ 55K/moSep 25, 2026
MITSep 25, 2026 · metrics 2.10.0
npm
22At Riskhealth index
arleyGuoLei/wechat-app-words-pk
微信小程序 云开发 毕业设计「 单词天天斗 」,好友/匹配/人机 对战,单词 本科毕设 typescript 原生微信小程序
TypeScript · JavaScript★ 172Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
beta-team/beta-recsys
Beta-RecSys: Build, Evaluate and Tune Automated Recommender Systems
Python★ 172↓ 38/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
crates.io
50Moderatehealth index
trifectatechfoundation/bzip2-rs
libbz2 (bzip2 compression) bindings for Rust
C · HTML · Rust★ 172↓ 10.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
your-tools/tbump
Bump software releases
Python★ 172Sep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
29At Riskhealth index
JuliaLang/Reexport.jl
Julia macro for re-exporting one module from another
Julia★ 171Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Maven · npm
19Criticalhealth index
appium/io.appium.settings
App for dealing with Android settings
Java · TypeScript★ 171Oct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
26At Riskhealth index
browserify/browser-pack
pack node-style source files from a json stream into a browser bundle
JavaScript★ 171↓ 4M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
—
17Criticalhealth index
contre/Windows-API-Code-Pack-1.1
Windows API Code Pack 1.1
C# · Visual Basic .NET★ 171Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
28At Riskhealth index
gertd/go-pluralize
Pluralize and singularize any word (golang adaptation of https://www.npmjs.com/package/pluralize)
Go★ 171Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
35Weakhealth index
sindresorhus/run-applescript
Run AppleScript and get the result
JavaScript · TypeScript★ 171↓ 206M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
23At Riskhealth index
teambition/merge2
Merge multiple streams into one stream in sequence or parallel (~119M/month downloads).
JavaScript★ 171↓ 427M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
14Criticalhealth index
wilzbach/msa
Modular BioJS compoment for a multiple sequence alignment
JavaScript★ 171↓ 623/moOct 25, 2026
BSL-1.0Oct 25, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
Michael-F-Bryan/mdbook-linkcheck
A backend for `mdbook` which will check your links for you.
Rust★ 170↓ 8,036/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Maven
35Weakhealth index
blackears/svgSalamander
No repository description published.
Java★ 170Oct 25, 2026
Custom licenseOct 25, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
danielsdeleo/deep_merge
Recursive Merging for Ruby Hashes
Ruby★ 170Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
12Criticalhealth index
jackc/pgproto3
No repository description published.
Go★ 170Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
neilenns/node-deepstackai-trigger
Detects motion using Deepstack AI and calls registered triggers based on trigger rules.
TypeScript★ 170Sep 29, 2026
MITSep 29, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
nirum/tableprint
Pretty console printing :clipboard: of tabular data in python :snake:
Python★ 170↓ 7,598/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
pages-themes/modernist
Modernist is a Jekyll theme for GitHub Pages
SCSS · HTML · Ruby★ 170Sep 10, 2026
CC0-1.0Sep 10, 2026 · metrics 2.10.0
npm
32At Riskhealth index
statgen/locuszoom
A Javascript/d3 embeddable plugin for interactively visualizing statistical genetic data from customizable sources.
JavaScript★ 170↓ 2,975/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
30At Riskhealth index
studiometa/vue-mapbox-gl
🗺 Vue components for mapbox-gl
Vue · TypeScript★ 170↓ 13.2K/moSep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
RubyGems · npm
81Excellenthealth index
tdiary/tdiary-core
tDiary, The TSUKKOMI-able Weblog.
Ruby★ 170Sep 12, 2026
GPL-2.0Sep 12, 2026 · metrics 2.10.0
npm
36Weakhealth index
thlorenz/convert-source-map
Converts a source-map from/to different formats.
JavaScript★ 170↓ 818M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
20At Riskhealth index
tonyhffong/Lint.jl
A lint tool for Julia code
Julia★ 170Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
—
19Criticalhealth index
w1hkj/fldigi
Amateur Radio digital modem application [SF mirror]
C++ · C★ 170Sep 20, 2026
GPL-3.0Sep 20, 2026 · metrics 2.10.0