Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,670
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,579 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
lbl-srg/modelica-json
Modelica to JSON Parser
JavaScript · HTML★ 39Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
21At Riskhealth index
mediachain/aleph
א: The mediachain universe manipulation engine
JavaScript★ 39↓ 30/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
21At Riskhealth index
mongolab/mongodb-uri-node
No repository description published.
JavaScript★ 39↓ 1.3M/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
Go
37Weakhealth index
poy/onpar
Parallel testing framework for Go
Go★ 39Oct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
Go
25At Riskhealth index
samgozman/fin-thread
🤖 Automatic financial news feed powered by AI.
Go★ 39Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
symplify/phpstan-extensions
'ignore' error format, solid Symfony SplFileInfo and other useful extensions for PHPStan
PHP★ 39↓ 418.8K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
thobbs/pure-sasl
A pure python SASL client
Python★ 39↓ 4.5M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
tomatophp/filament-icons
Picker & Table Column & Icons Provider for FilamentPHP
PHP · Blade★ 39↓ 4,784/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
PDBeurope/pdbecif
A lightweight pure python package for reading, writing and manipulating mmCIF files distributed by the wwPDB"
Python★ 38↓ 2,465/moOct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
Packagist
42Weakhealth index
PrestaShop/circuit-breaker
A resilient PHP library that allows to safely make calls to external services
PHP★ 38↓ 193.4K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
Tyrrrz/JsonExtensions
Productivity extensions for System.Text.Json
C#★ 38Oct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
WyriHaximus/FlyPie
Flysystem plugin for CakePHP
PHP★ 38↓ 19.2K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
55Moderatehealth index
ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
Go★ 38Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · RubyGems
18Criticalhealth index
cloud-gov/pages-uswds-jekyll
Reference implementation of USWDS 2.0 for Jekyll on Cloud.gov. Demo ->
SCSS · HTML★ 38Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
29At Riskhealth index
cosmos/cosmos-proto
No repository description published.
Go★ 38Sep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
Hex
12Criticalhealth index
dashbitco/nimble_strftime
A simple and fast strftime-based datetime formatter
Elixir★ 38Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
RubyGems
35Weakhealth index
dkubb/axiom-types
Define types with optional constraints
Ruby★ 38Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
16Criticalhealth index
hermeznetwork/contracts
Hermez network protocol smart contracts
JavaScript · Solidity★ 38Oct 14, 2026
GPL-3.0Oct 14, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
hirefire/hirefire-resource-ruby
HireFire integration library for Ruby applications
Ruby★ 38Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
—
31At Riskhealth index
justinethier/cyclone-bootstrap
:cyclone: Install Cyclone Scheme on your machine.
C★ 38Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
kartik-v/mpdf
Fork of the mPDF latest DEV library (unofficial) with composer and packagist support.
PHP★ 38↓ 499/moSep 20, 2026
GPL-2.0Sep 20, 2026 · metrics 2.10.0
Packagist
12Criticalhealth index
kartik-v/yii2-widget-growl
A widget to generate growl based notifications using bootstrap-growl plugin (sub repo split from yii2-widgets)
PHP · CSS★ 38↓ 82.6K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
40Weakhealth index
log4js-node/streamroller
node.js file streams that roll over when they reach a maximum size, or a date/time.
JavaScript★ 38↓ 25.4M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Hex
21At Riskhealth index
lpil/mug
🍺 A TCP client for Gleam!
Gleam★ 38↓ 4,525/moOct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
npm
36Weakhealth index
mbostock/internmap
Map and Set with automatic key interning
JavaScript★ 38↓ 386M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
pedroburon/dotenv
python .env file handler
Python★ 38Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
rust-vmm/vm-device
This is a public archive. The repository moved to https://github.com/rust-vmm/rust-vmm
Rust★ 38↓ 592/moOct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
29At Riskhealth index
yargs/set-blocking
set blocking stdio and stderr ensuring that terminal output does not truncate
JavaScript★ 38↓ 188M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0