Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,295
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,408 recordsRanked by popularity · browse by tag · record statistics
Packagist
19Criticalhealth index
Lctrs/psalm-psr-container-plugin
Let Psalm understand better psr11 containers
PHP · Gherkin · Makefile★ 17↓ 8,230/moOct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
Go
32At Riskhealth index
MindscapeHQ/raygun4go
Go SDK for Raygun
Go★ 17Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
—
19Criticalhealth index
OpenHands/typescript-client
No repository description published.
Mixed★ 17Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
TooManyBees/lab
RGB <-> Lab color space conversion
Rust★ 17↓ 3.6M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
YoWASP/nextpnr
Unofficial nextpnr WebAssembly packages
JavaScript · Python · Shell★ 17↓ 3,054/moSep 14, 2026
ISCSep 14, 2026 · metrics 2.10.0
Hex
26At Riskhealth index
am-kantox/formulae
A set of function to deal with analytical formulae.
Elixir★ 17Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
npm · PyPI
19Criticalhealth index
andreagroferreira/arka-os
ArkaOS — The Operating System for AI Agent Teams | 62 agents, 238 skills, 17 departments | npx arkaos install
Python · JavaScript★ 17↓ 1,789/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
37Weakhealth index
appcelerator/cli-kit
Everything you need to create awesome Node.js command line interfaces
JavaScript★ 17↓ 5,893/moSep 29, 2026
Custom licenseSep 29, 2026 · metrics 2.10.0
npm
15Criticalhealth index
bcaudan/node-sonar-scanner
Sonar scanner for node
Batchfile · Shell · JavaScript★ 17↓ 555K/moOct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
—
14Criticalhealth index
beeware/travertino
A set of constants and utilities for describing user interfaces
Mixed★ 17Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
bnb-chain/revm
No repository description published.
Rust★ 17Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
boxyhq/ui
UI toolkit to ease BoxyHQ integration
TypeScript★ 17↓ 30.9K/moOct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
25At Riskhealth index
capnfabs/grouse
A diff tool for Hugo static sites.
Go★ 17Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
32At Riskhealth index
conventional-changelog/get-pkg-repo
Get repository user and project information from package.json file contents.
JavaScript★ 17↓ 11.5M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
24At Riskhealth index
deepfryed/idn-ruby
LibIDN Ruby Bindings.
Ruby · C★ 17Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
14Criticalhealth index
dgrtwo/tidytuesday
Official repo for the #tidytuesday project
HTML★ 17Oct 22, 2026
CC0-1.0Oct 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
element-hq/matrix-react-sdk
Matrix SDK for React Javascript
TypeScript★ 17↓ 27.3K/moSep 20, 2026
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Hex
33At Riskhealth index
elixir-makeup/makeup_html
HTML lexer for Makeup
Elixir★ 17↓ 51.7K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
fleet-ai/fleet-sdk
Fleet Python SDK
Python★ 17↓ 127.2K/moSep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
fniessink/next-action
Next-action: determine the next action to work on from a list of actions in a todo.txt file
Python · Gherkin★ 17Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io · Maven
14Criticalhealth index
h-akatsuki/hitomi_search_plus
A fast and efficient Hitomi.la search application built with Flutter. Features advanced search, smart bookmarks, and a modern UI.
Dart★ 17Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
npm
20At Riskhealth index
iarna/promise-inflight
One promise for multiple requests in flight to avoid async duplication
JavaScript★ 17↓ 47.6M/moSep 15, 2026
ISCSep 15, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
ioquatix/bake-test-external
No repository description published.
Ruby★ 17Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
16Criticalhealth index
jingyugao/rowserrcheck
Analyzer: checks whether err of sql.Rows is checked.
Go★ 17Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
jonas-schievink/adler
Rust crate for computing Adler-32 checksums
Rust★ 17↓ 5.1M/moSep 18, 2026
0BSDSep 18, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/map-visit
Map `visit` over an array of objects.
JavaScript★ 17↓ 35.8M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
25At Riskhealth index
libp2p/go-msgio
simple package to r/w length-delimited slices.
Go★ 17Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0