Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,226
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,475 recordsRanked by popularity · browse by tag · record statistics
npm
32At Riskhealth index
gkz/optionator
JavaScript option parsing and help generation library
LiveScript★ 166↓ 533M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
jmespath/jmespath.rb
Ruby implementation of JMESPath
Ruby★ 166Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
51Moderatehealth index
kentcdodds/rtl-css-js
RTL for CSS in JS
JavaScript★ 166↓ 16.5M/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
22At Riskhealth index
metafizzy/outlayer
:construction_worker: the brains & guts of a layout library
JavaScript · HTML★ 166↓ 1.4M/moOct 24, 2026
No licenseOct 24, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
rdp/os
The OS gem allows for some easy telling if you’re on windows or not. OS.windows? as well as some other helper utilities
Ruby★ 166Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
22At Riskhealth index
sabhiram/go-gitignore
A gitignore parser for go
Go★ 166Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
clue/commander
Finally a sane way to register available commands and arguments and match your command line in PHP
PHP★ 165↓ 866/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
19Criticalhealth index
gluster/glusterd2
[DEPRECATED] Glusterd2 is the distributed management framework to be used for GlusterFS.
Go★ 165Oct 4, 2026
GPL-2.0Oct 4, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
miloschuman/yii2-highcharts
Highcharts widget for Yii 2 Framework
PHP★ 165↓ 25.5K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
31At Riskhealth index
blokkli/editor
Interactive page editor for Nuxt 3
Vue · TypeScript · CSS★ 164↓ 2,948/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
—
28At Riskhealth index
dash-project/dash
DASH, the C++ Template Library for Distributed Data Structures with Support for Hierarchical Locality for HPC and Data-Driven Science
C++ · C★ 164Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
19Criticalhealth index
gnosis/gp-v2-contracts
Smart contracts for the Gnosis Protocol v2
TypeScript · Solidity★ 164Sep 18, 2026
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
17Criticalhealth index
liuquanhao/moyu
墨鱼探针
JavaScript · Vue · Go★ 164Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
npm
34At Riskhealth index
microsoft/powerbi-client-angular
Power BI Angular component. This library lets you embed Power BI report, dashboard, dashboard tile, report visual, or Q&A in your Angular application.
TypeScript★ 164↓ 185.6K/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
RocketChat/fuselage
React port of Rocket.Chat's design system, Fuselage
TypeScript · SCSS★ 163↓ 68K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
22At Riskhealth index
hotforfeature/origami
Angular + Polymer
TypeScript★ 163↓ 717/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
25At Riskhealth index
AriaMinaei/RenderKid
Stylish console.log for node
CoffeeScript★ 162↓ 56.1M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
PyCQA/flake8-docstrings
Integration of pydocstyle and flake8 for combined linting and reporting
Python★ 162↓ 1.6M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
28At Riskhealth index
trailofbits/uthenticode
A cross-platform library for verifying Authenticode signatures
C++★ 162Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
DevExpress/devextreme-react
[MIGRATED] See https://github.com/DevExpress/DevExtreme/tree/HEAD/packages/devextreme-react
JavaScript · TypeScript★ 161Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
aligay/jsonuri
🌳 阿里剑鱼、iceluna、vanex 数据操作底层库,使用O(n) 复杂度回溯祖先节点
TypeScript · HTML★ 161↓ 2,565/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
clarketm/mergedeep
A deep merge function for 🐍.
Python★ 161↓ 20.8M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
L4z3x/mal-cli
Terminal Interface for the official MyAnimeList api.
Rust★ 160↓ 8/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
danburkert/fs2-rs
Extended utilities for working with files and filesystems in Rust
Rust★ 160↓ 6.1M/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
14Criticalhealth index
flmnt/graphemer
Unicode character splitter
TypeScript★ 160↓ 171M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
48Weakhealth index
inspect-js/object-inspect
string representations of objects in node and the browser
JavaScript★ 160↓ 617M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
27At Riskhealth index
inukshuk/bibtex-ruby
A BibTeX library, parser, and converter for Ruby.
Ruby · Gherkin★ 160Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
mbr/tinyrpc
A compact, modular transport and protocol agnostic RPC library. Does jsonrpc v2.
Python★ 160↓ 29.2K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
46Weakhealth index
aurelia/dependency-injection
A lightweight, extensible dependency injection container for JavaScript.
TypeScript★ 159↓ 109.9K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0