Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,204
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,383 recordsRanked by popularity · browse by tag · record statistics
crates.io
20At Riskhealth index
RazrFalcon/strict-num
A collection of bounded numeric types.
Rust★ 10↓ 6.3M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
30At Riskhealth index
STARRY-S/zip
Go zip library with Append (Updater) support.
Go★ 10Sep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
StoneDot/regtail
Regex base tail written in Rust
Rust · HTML★ 10Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
18Criticalhealth index
TeamWarp/biome-plugin-drizzle
Biome linter plugin for Drizzle ORM safety rules. Enforces .where() clauses on delete and update operations to prevent accidental data loss.
TypeScript · JavaScript★ 10↓ 5,110/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VektorNode/selva-compute
TypeScript framework for Rhino.Compute & Grasshopper with Three.js visualization
TypeScript★ 10Oct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
Go
10Criticalhealth index
absfs/afero
A FileSystem Abstraction System for Go
Go★ 10Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
acdha/django-haystack
FORK of toastdriven/django-haystack - you probably want to look at my pull requests over there if you're looking for something useful
Python★ 10Oct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
adyen-examples/adyen-magento2-hyva
No repository description published.
PHP · HTML★ 10↓ 3,170/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
alchemy-run/cloudflare-tools
Developer tooling for Cloudflare Workers, powered by Effect and Rolldown.
TypeScript★ 10↓ 1,826/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
amphp/php-cs-fixer-config
Common code style configuration for all @amphp projects.
PHP★ 10↓ 5,318/moSep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
aycabta/yamatanooroti
No repository description published.
Ruby★ 10Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go · crates.io · npm
19Criticalhealth index
bang9/ai-tools
A collection of tools for Claude Code to operate more efficiently
TypeScript · Rust · Go★ 10Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
benoitc/unicode_util_compat
unicode_util compatibility library for Erlang < 20
Erlang★ 10↓ 1.1M/moSep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
NuGet
24At Riskhealth index
billpratt/serilog-sinks-sumologic
A Serilog event sink that writes to Sumo Logic
C#★ 10Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
15Criticalhealth index
biojs/generator-biojs-webcomponents
Generate all the boilerplate for your next BioJS tool!
JavaScript★ 10↓ 5/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
npm
16Criticalhealth index
browserify/browserify-des
DES for browserify
JavaScript★ 10↓ 39.1M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
19Criticalhealth index
buildkite/test-collector-python
Moved to buildkite/bktest — Python adapter for Buildkite Test Engine
Mixed★ 10Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
npm · Maven
20At Riskhealth index
bwindsor/react-native-image-sequence
native implementation for creating frame based image animations
Java · Objective-C★ 10↓ 1,889/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
cbeer/deprecation
Stand-alone deprecation library borrowed from ActiveSupport::Deprecation
Ruby★ 10Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Hex
35Weakhealth index
felt/union_typespec
A simple, tiny library for defining an Elixir @type whose values are one of a few options
Elixir★ 10↓ 4,991/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
crates.io
13Criticalhealth index
filecoin-project/paired
Pairing-friendly elliptic curve library
Rust★ 10Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
—
16Criticalhealth index
googleapis/python-redis
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-redis
Mixed★ 10Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
—
45Weakhealth index
grafana/github-api-commit-action
Commits changes to the repository through the Github api instead of traditional git commands.
Mixed★ 10Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
graingert/taskgroup
No repository description published.
Python★ 10↓ 1.7M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
22At Riskhealth index
greut/eclint-action
GitHub Action running the EditorConfig linter
Shell · Dockerfile★ 10Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
—
24At Riskhealth index
hideakitai/ArxSmartPtr
C++ smart pointer-like classes for Arduino which can't use standard smart pointers
C++★ 10Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
42Weakhealth index
hypertrace/hyperdash
A dashboarding framework
TypeScript★ 10Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
crates.io
40Weakhealth index
informalsystems/malachite
Flexible BFT consensus engine in Rust
Rust · Bluespec★ 10Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
18Criticalhealth index
inkeep/ai-api-ts
Inkeep's Search and Chat API TypeScript SDK
TypeScript★ 10↓ 11.5K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0