Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,209
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,475 recordsRanked by popularity · browse by tag · record statistics
PyPI
19Criticalhealth index
zhenhuaw-me/tflite2onnx
Convert TensorFlow Lite models (*.tflite) to ONNX.
Python★ 170↓ 8,002/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
21At Riskhealth index
BaileyJM02/markdown-to-pdf
A GitHub Action to make PDF and HTML files from Markdown
CSS · JavaScript★ 169Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
avalonv/reCBZ
Utility for converting and optimizing comics for e-readers & mobile devices
Python★ 169↓ 53/moOct 23, 2026
GPL-3.0Oct 23, 2026 · metrics 2.10.0
—
30At Riskhealth index
binance/binance-api-swagger
Swagger for the Binance Public API
HTML · Shell★ 169Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go
29At Riskhealth index
dispatchrun/wzprof
WebAssembly Profiler based on Wazero
Go★ 169Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
erasureprotocol/erasure-protocol
Information wants to be expensive
JavaScript · Solidity★ 169↓ 8/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
guzzle/guzzle_sphinx_theme
Sphinx theme used by Guzzle
HTML · CSS · Python★ 169↓ 33.2K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
14Criticalhealth index
intenthq/icicle
A distributed, k-sortable unique ID generation system using Redis and Lua.
Java · Scala★ 169Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
iroco-co/aioimaplib
Python asyncio IMAP4rev1 client library
Python★ 169Sep 17, 2026
GPL-3.0Sep 17, 2026 · metrics 2.10.0
Hex
37Weakhealth index
lpil/thoas
A blazing fast JSON parser and generator in pure Erlang.
Erlang · Elixir★ 169↓ 292.2K/moSep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
makew0rld/md2gemini
File converter from Markdown to Gemini.
Python★ 169Sep 20, 2026
LGPL-3.0Sep 20, 2026 · metrics 2.10.0
—
26At Riskhealth index
nozzle/throttler
No repository description published.
Go★ 169Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
rwf2/multer
An async parser for multipart/form-data content-type in Rust
Rust★ 169↓ 9.2M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
DaveRandom/LibDNS
DNS implementation in pure PHP
PHP★ 168↓ 5.1M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
npm
28At Riskhealth index
d3/d3-timer
An efficient queue for managing thousands of concurrent animations.
JavaScript★ 168↓ 324M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
delight-im/PHP-Cookie
Modern cookie management for PHP
PHP★ 168↓ 40K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
mariovalney/laravel-keycloak-web-guard
Simple Keycloak Guard to Laravel Web Routes - https://packagist.org/packages/vizir/laravel-keycloak-web-guard
PHP★ 168↓ 8,126/moSep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
Go
19Criticalhealth index
netdata/go.d.plugin
netdata go.d.plugin
Go★ 168Sep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
ofek/userpath
Cross-platform tool for adding locations to the user PATH, no elevated privileges required!
Python★ 168↓ 14.8M/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
23At Riskhealth index
Bunlong/next-qrcode
React hooks for generating QRCode for your next React apps.
TypeScript · JavaScript · HTML★ 167↓ 221.2K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
Krusen/BencodeNET
.NET library for encoding/decoding bencode and reading/writing torrent files
C#★ 167Sep 12, 2026
UnlicenseSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
curvenote/curvenote
Create, edit, share, and publish scientific and technical documents.
TypeScript★ 167↓ 8,497/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
Maven
42Weakhealth index
download-maven-plugin/download-maven-plugin
These are a few plugins to help maven user to download different files on different protocol in part of maven build.
Java★ 167Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
20At Riskhealth index
endpoints/endpoints
a hypermedia API framework for javascript.
JavaScript★ 167↓ 260/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
37Weakhealth index
pavlo-v-chernykh/keystore-go
A Go (golang) implementation of Java KeyStore encoder/decoder
Go★ 167Oct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
NuGet
20At Riskhealth index
samcragg/sharpkml
SharpKML is an implementation of the Open Geospatial Consortium (OGC) KML 2.2 standard developed in C#, able to read/write both KML files and KMZ files.
C#★ 167Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
38Weakhealth index
sindresorhus/environment
Check which JavaScript environment your code is running in at runtime: browser, Node.js, Bun, etc
JavaScript★ 167↓ 140M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
NuGet
21At Riskhealth index
4RTools/4RTools
Autopot, Skill Spammer, Dancer Macro and more
C#★ 166Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
empirical-run/empirical
Test and evaluate LLMs and model configurations, across all the scenarios that matter for your application
TypeScript★ 166↓ 374/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0