Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,763
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,394 recordsRanked by popularity · browse by tag · record statistics
RubyGems
28At Riskhealth index
xwmx/pandoc-ruby
Ruby wrapper for Pandoc
Ruby★ 351Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
21At Riskhealth index
feross/safe-buffer
Safer Node.js Buffer API
JavaScript★ 347↓ 1.1B/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
14Criticalhealth index
pvande/differ
A simple gem for generating string diffs
Ruby★ 347Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
requests/requests-ntlm
NTLM authentication support for Requests.
Python★ 347Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
SimpleBus/message-bus
[READ ONLY] Generic classes and interfaces for messages and message buses. Full documentation can be found here:
PHP★ 346↓ 44K/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Maven
16Criticalhealth index
duolingo/rtl-viewpager
ViewPager with RTL support :arrows_counterclockwise:
Java★ 345Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
nishanths/exhaustive
Check exhaustiveness of switch statements of enum-like constants in Go source code.
Go★ 344Aug 4, 2026
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
salaniz/pycocoevalcap
Python 3 support for the MS COCO caption evaluation tools
Python★ 344↓ 622.1K/moAug 29, 2026
Custom licenseAug 29, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Azure/azure-storage-python
Microsoft Azure Storage Library for Python
Python★ 343↓ 14M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
rtfd/recommonmark
A markdown parser for docutils
Python★ 343↓ 1M/moJul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
30At Riskhealth index
d3/d3-drag
Drag and drop SVG, HTML or Canvas using mouse or touch input.
JavaScript★ 342↓ 102M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
crates.io · npm
21At Riskhealth index
b-inary/desktop-postflop
[Development suspended] Advanced open-source Texas Hold'em GTO solver with optimized performance
Vue · TypeScript★ 341Aug 1, 2026
AGPL-3.0Aug 1, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
maciejhirsz/ramhorns
Fast Mustache template engine implementation in pure Rust.
Rust★ 340↓ 22.4K/moAug 15, 2026
MPL-2.0Aug 15, 2026 · metrics 2.10.0
20At Riskhealth index
pawn-lang/compiler
Pawn compiler for SA-MP with bug fixes and new features - runs on Windows, Linux, macOS
C · Assembly★ 340Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
39Weakhealth index
shajidhasan/spoilerjs
A framework-agnostic web component for creating beautiful spoiler effects with Telegram-inspired particle animations.
Svelte · TypeScript★ 340↓ 2,022/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
enlightn/security-checker
A PHP dependency vulnerabilities scanner based on the Security Advisories Database.
PHP★ 339↓ 277.7K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
friends-of-reactphp/mysql
Async MySQL database client for ReactPHP.
PHP★ 339↓ 10.2K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
al45tair/netifaces
No repository description published.
C · Python★ 338Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
attr-encrypted/encryptor
A simple wrapper for the standard ruby OpenSSL library
Ruby★ 338Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
npm
30At Riskhealth index
d3/d3-time-format
Parse and format times, inspired by strptime and strftime.
JavaScript★ 338↓ 310M/moAug 31, 2026
ISCAug 31, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
tailhook/quick-error
A rust-macro which makes errors easy to write
Rust★ 338↓ 23.6M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Packagist
38Weakhealth index
lanthaler/JsonLD
JSON-LD processor for PHP
PHP★ 336↓ 233.3K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
webdesus/fs_extra
Expanding opportunities standard library std::fs and std::io
Rust★ 335↓ 23.2M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
30At Riskhealth index
allenai/openie-standalone
Quality information extraction at web scale. Edit
Scala★ 334Sep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
appliedzkp/zkevm-specs
No repository description published.
Python★ 332Jul 17, 2026
No licenseJul 17, 2026 · metrics 2.10.0
Go
29At Riskhealth index
go4org/go4
go4 hosts the go4.org packages.
Go★ 332Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
22At Riskhealth index
ajafff/tsutils
utility functions for working with typescript's AST
TypeScript★ 331↓ 77.5M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
npm
28At Riskhealth index
dougwilson/nodejs-depd
Deprecate all the things
JavaScript★ 329↓ 544M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
23At Riskhealth index
gristlabs/ts-interface-checker
Runtime library to validate data against TypeScript interfaces.
TypeScript · JavaScript★ 329↓ 186M/moAug 31, 2026
Apache-2.0Aug 31, 2026 · metrics 2.10.0