Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,759
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,396 recordsRanked by popularity · browse by tag · record statistics
RubyGems
26At Riskhealth index
guard/rb-inotify
A thorough inotify wrapper for Ruby using FFI.
Ruby★ 329Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
kata198/func_timeout
Python module which allows you to specify timeouts when calling any existing function, and support for stoppable threads
Python★ 329↓ 7.3M/moAug 8, 2026
LGPL-3.0Aug 8, 2026 · metrics 2.10.0
npm · Maven · RubyGems
19Criticalhealth index
Instabug/Instabug-React-Native
In-app feedback and bug reporting tool for React Native
TypeScript · Java · Objective-C★ 328↓ 26.4K/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
discordjs/voice
Implementation of the Discord Voice API for discord.js and other JS/TS libraries
TypeScript★ 328Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.10.0
19Criticalhealth index
esri/arcgis-runtime-samples-ios
Swift samples demonstrating various capabilities of ArcGIS Runtime SDK for iOS
Swift★ 328Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
25At Riskhealth index
kframework/c-semantics
Semantics of C in K
C · OCaml★ 328Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
maxcountryman/flask-bcrypt
Flask-Bcrypt is a Flask extension that provides bcrypt hashing utilities for your application.
Python★ 327↓ 2M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
open-osrs/runelite
Actually open source Old School RuneScape client
Java★ 326Jul 24, 2026
BSD-2-ClauseJul 24, 2026 · metrics 2.10.0
npm
19Criticalhealth index
w3c/browser-specs
A machine-readable list of Web specifications
JavaScript★ 326↓ 27.6K/moJul 18, 2026
Custom licenseJul 18, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jasonwilliams/anki
Anki VSCode Plugin
TypeScript★ 325Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
langalex/couch_potato
Ruby persistence layer for CouchDB.
Ruby★ 325Sep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
mikehaertl/php-shellcommand
A simple object oriented interface to execute shell commands in PHP
PHP★ 325↓ 959.8K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
asciidoctor/jekyll-asciidoc
:syringe: A Jekyll plugin that converts AsciiDoc source files in your site to HTML pages using Asciidoctor.
Ruby★ 324Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
epoberezkin/fast-json-stable-stringify
Deterministic JSON.stringify() - a faster version of @substack's json-stable-strigify without jsonify.
JavaScript★ 322↓ 604M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
samueltuoyo15/Dokugen
Lightweight README.md file Generator CLI. It simplifies the process of writing your README.md file from scratch by generating professional README.md files for your projects, saving you time. The idea behind Dokugen is simple but impactful, automate the most neglected part of a repo. The results cleaner projects and happier contributors
TypeScript · Python★ 322Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
untitaker/python-atomicwrites
Powerful Python library for atomic file writes.
Python★ 321Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
36Weakhealth index
NVIDIA/ai-assisted-annotation-client
Client side integration example source code and libraries for AI-Assisted Annotation SDK
C++ · Python · CMake★ 320Aug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
kevlened/pytest-parallel
A pytest plugin for parallel and concurrent testing
Python★ 320Aug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
redis/hiredis-rb
Ruby wrapper for hiredis
Ruby · C★ 320Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
npm
20At Riskhealth index
IndigoUnited/node-promise-retry
Retries a function that returns a promise, leveraging the power of the retry module.
JavaScript★ 319↓ 106M/moAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Hex
23At Riskhealth index
gausby/tortoise
A MQTT Client written in Elixir
Elixir★ 319↓ 5,354/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Packagist · npm
48Weakhealth index
rmsramos/activitylog
Spatie Laravel activity logs inside of Filament.
PHP★ 319↓ 16.6K/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
Maven
18Criticalhealth index
trustin/os-maven-plugin
A Maven plugin that sets various useful properties detected from ${os.name} and ${os.arch} properties.
Java★ 318Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
21At Riskhealth index
garycourt/uri-js
An RFC 3986 compliant, scheme extendable URI parsing/validating/normalizing/resolving library for JavaScript
JavaScript · TypeScript★ 317↓ 591M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
crates.io
42Weakhealth index
hawkw/sharded-slab
a lock-free concurrent slab (experimental)
Rust★ 317↓ 38.5M/moAug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
huaban/elasticsearch-analysis-jieba
The plugin includes the `jieba` analyzer, `jieba` tokenizer, and `jieba` token filter, and have two mode you can choose. one is `index` which means it will be used when you want to index a document. another is `search` mode which used when you want to search something.
Java★ 317Jul 31, 2026
No licenseJul 31, 2026 · metrics 2.10.0
npm
23At Riskhealth index
jonschlinkert/clone-deep
Recursively (deep) clone JavaScript native types, like Object, Array, RegExp, Date as well as primitives. Used by superstruct, merge-deep, and many others!
JavaScript★ 317↓ 110M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
lsnepomuceno/laravel-a1-pdf-sign
Sign PDF files with valid x509 certificate
PHP★ 317↓ 2,843/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
41Weakhealth index
visionmedia/batch
Simple async batch with concurrency control and progress reporting
JavaScript★ 317↓ 70.1M/moAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0