Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,822
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,600 recordsRanked by popularity · browse by tag · record statistics
npm
22At Riskhealth index
mjknowles/matrix-mcp-server
MCP Server for a Matrix home server integration; chat, manage rooms, etc.
TypeScript★ 52Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
rails/builder
Provide a simple way to create XML markup and data structures.
Ruby★ 52Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
26At Riskhealth index
rocketsciencegg/go-ts3
A golang TeamSpeak 3 ServerQuery client
Go★ 52Sep 20, 2026
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
rubycocos/markdown
markdown tools, libraries & scripts
JavaScript · Ruby★ 52Oct 20, 2026
CC0-1.0Oct 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
samsonjs/format
printf-like formatting for JavaScript
JavaScript★ 52↓ 56.6M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/p-each-series
Iterate over promises serially
JavaScript · TypeScript★ 52↓ 19.9M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
21At Riskhealth index
tad-lispy/node-damerau-levenshtein
Damerau - Levenstein distance function for node
JavaScript★ 52↓ 204M/moOct 21, 2026
BSD-2-ClauseOct 21, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
unicode-rs/unicode-xid
No repository description published.
Rust★ 52↓ 35.8M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Hex
21At Riskhealth index
uwiger/edown
EDoc extension for generating Github-flavored Markdown
Erlang · sed★ 52↓ 17.5K/moOct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
npm
25At Riskhealth index
vercel/body-scroll-lock
Body scroll locking that just works with everything 😏
JavaScript★ 52Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
NuGet
17Criticalhealth index
Azure/azure-documentdb-changefeedprocessor-dotnet
This library provides a host for distributing change feed events in partitioned collection across multiple observers. Instances of the host can scale up (by adding) or down (by removing) dynamically, and the load will be automatically distributed among active instances in about-equal way.
C#★ 51Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
28At Riskhealth index
BolajiOlajide/ng-banks
Lightweight Zero dependency npm package to get list of banks in Nigeria (Recognized by CBN)
TypeScript★ 51↓ 6,055/moOct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
—
31At Riskhealth index
CTUAvastLab/JsonGrinder.jl
Machine learning with Mill.jl for JSON documents
Julia★ 51Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
NuGet
25At Riskhealth index
JPlenert/QRCoder-ImageSharp
A pure C# Open Source QR Code implementation using ImageSharp.
C#★ 51Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
31At Riskhealth index
Jille/raft-grpc-transport
Make hashicorp/raft communicate over gRPC
Go★ 51Sep 14, 2026
BSD-2-ClauseSep 14, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
JinyuanSun/DDGScan
DDGScan: an integrated parallel workflow for the in silico point mutation scan of protein
Python★ 51Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
31At Riskhealth index
Pressio/pressio-rom
linear and non-linear solvers, time integration, roms
C++★ 51Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Packagist · npm
19Criticalhealth index
SemanticMediaWiki/SemanticResultFormats
Provides additional visualizations (result formats) for Semantic MediaWiki
JavaScript · PHP★ 51↓ 3,672/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
danielfriis/ruby_llm-template
Organize prompts into reusable templates for RubyLLM
Ruby★ 51Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
ebkalderon/renderdoc-rs
RenderDoc application bindings for Rust
Rust★ 51↓ 3.3M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist · npm
27At Riskhealth index
fatturaelettronicaphp/FatturaElettronica
Pacchetto PHP per la lettura, la generazione e la validazione della fattura elettronica, sia per la Pubblica Amministrazione che tra privati (B2B)
PHP★ 51↓ 3,748/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
22At Riskhealth index
ice1000/code_wars_android
:computer: A mobile client for CodeWars
Dart★ 51Sep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
ikalnytskyi/picobox
Dependency injection framework designed with Python in mind.
Python★ 51↓ 215.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
lxml/lxml-stubs
Type stubs for the lxml package
Python★ 51↓ 5.4M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
mageplaza/magento-2-gdpr
Magento 2 GDPR extension helps online stores which are directly affected by GDPR, Mageplaza is about to release an extension called Mageplaza GDPR for Magento 2. This module is to supports online stores to comply those data privacy regulations.
PHP · HTML★ 51↓ 4,399/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
nbaksalyar/rust-streaming-http-parser
Streaming HTTP parser for Rust, based on nodejs/http-parser
Rust · PowerShell★ 51↓ 9,089/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
—
26At Riskhealth index
nmenon/omap-u-boot-utils
U-Boot Utilities for Texas Instrument's OMAP platforms
C★ 51Sep 13, 2026
GPL-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
pelikan-io/rustcommon
Common Rust library
Rust★ 51↓ 348/moSep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
37Weakhealth index
razorpay/razorpay-cordova
Cordova wrapper around Razorpay's Android and iOS SDKs
Shell · Java · JavaScript★ 51↓ 955/moSep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0