Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,236
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,040 recordsRanked by popularity · browse by tag · record statistics
npm
12Criticalhealth index
schmooky/pylinka
No repository description published.
TypeScript★ 4↓ 20.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
scieloorg/ioisis
I/O for ISIS files in Python
Python★ 4↓ 39/moOct 23, 2026
BSD-2-ClauseOct 23, 2026 · metrics 2.10.0
npm · Go · PyPI
14Criticalhealth index
sendify-project/sendify
A chat service with basic messaging features.
CSS · JavaScript★ 4Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
seperman/orderly-set
Orderly Set previously known as Ordered Set
Python★ 4↓ 48.3M/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
—
14Criticalhealth index
sigp/unsafe-eth2-deposit-contract
An UNSAFE deposit contract for testing Lighthouse. DO NOT USE.
Python★ 4Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
npm
40Weakhealth index
sinonjs/commons
Simple functions shared among the sinon end user libraries
JavaScript★ 4↓ 213M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm · NuGet
11Criticalhealth index
skbkontur/cassandra-distributed-task-queue
.NET library implementing distributed task queue machinery using Apache Cassandra
C# · TypeScript★ 4↓ 59/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
sphinx-doc/sphinxcontrib-devhelp
No repository description published.
Python · Makefile★ 4↓ 16M/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
spiral/exceptions
[READ ONLY] Universal Exception Handler: console, web exception handlers, code highlights, snapshotting support. Subtree split of the Spiral Exceptions component (see spiral/framework)
PHP★ 4↓ 2,724/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/reactor
[READ ONLY] Code Scaffolding using declarative OOP wrappers. Subtree split of the Spiral Reactor component (see spiral/framework)
PHP★ 4↓ 23.8K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
spiral/validator
The component provides an array-based DSL to construct complex validation chains.
PHP★ 4↓ 80.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
28At Riskhealth index
tarantool/go-discovery
Discovery library for Tarantool 3.0 written on Golang
Go★ 4Oct 19, 2026
BSD-2-ClauseOct 19, 2026 · metrics 2.10.0
npm
25At Riskhealth index
technance-foundation/code-style
📏 Technance code-style: Unified ESLint & Prettier configs for React, Next.js & Nest.js and Node projects
JavaScript · TypeScript★ 4↓ 2,459/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
thygrrr/fennecs-fork
... the tiny, tiny, high-energy Entity Component System!
C#★ 4Sep 25, 2026
MITSep 25, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
tjdwls101010/IBD-RS-Rating
No repository description published.
Python★ 4↓ 82/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
tsutsu3/uc.micro-py
Micro subset of unicode data files for linkify-it-py projects.
Python★ 4↓ 34.2M/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
unleashy/koota
Koota generates words given a pattern.
Ruby★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 166M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
wooorm/is-alphabetical
Check if a character is alphabetical
JavaScript★ 4↓ 190M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
x-govuk/html-attributes-utils
A small collection of utilities to ease working with hashes of HTML attributes
Ruby★ 4Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
NuGet
21At Riskhealth index
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
C#★ 4Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
zopefoundation/zope.deprecation
No repository description published.
Python★ 4↓ 2.2M/moOct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
23jdd/SamKv
一个面向日志场景的单机 LSM-Tree KV 存储引擎,提供 webui操作界面
Go★ 3Oct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
—
18Criticalhealth index
4paradigm/hybridsql-asserts
HybridSQL third-party libraries
Shell · Dockerfile★ 3Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
AcrylicShrimp/piped
A pipeline orchestrator for everyone to build softwares easier and faster.
Rust★ 3Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Go
22At Riskhealth index
AgustinBanchio/go-limit
No repository description published.
Go★ 3Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
11Criticalhealth index
Aleksey512/swarm-hpa
Horizontal autoscaling, stuck-task healing, and GitOps stack deploy for Docker Swarm — opt-in, dry-run by default.
Go · Shell★ 3Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
AlexanderSchuetz97/xz4rust
Memory Safe pure Rust no-std & no alloc XZ decoder
Rust★ 3↓ 6,263/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0