Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,745
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,405 recordsRanked by popularity · browse by tag · record statistics
NuGet
20At Riskhealth index
MizunagiKB/gd_cubism
Unofficial Live2D Player for Godot Engine
C++ · CSS★ 289Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
Byron/jwalk
Filesystem walk performed in parallel with streamed and sorted results
Rust★ 288↓ 704.1K/moAug 6, 2026
MITAug 6, 2026 · metrics 2.10.0
29At Riskhealth index
flyerhq/flutter_firebase_chat_core
Actively maintained, community-driven Firebase BaaS for chat applications with an optional chat UI.
Dart · C++ · CMake★ 288Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Go
34At Riskhealth index
omegion/ssh-manager
SSH Key Manager for 1Password, Bitwarden and AWS S3.
Go★ 288Sep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
servo/cocoa-rs
DEPRECATED - Cocoa/Objective-C bindings for the Rust programming language
Rust★ 288Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
sffjunkie/astral
Python calculations for the position of the sun and moon.
Python★ 288↓ 2.3M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
19Criticalhealth index
langchain-ai/langchain-community
⚠️ No longer maintained, see linked issue
Python★ 287Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
ehmicky/human-signals
Human-friendly process signals
JavaScript · TypeScript★ 286↓ 532M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
48Weakhealth index
recharts/react-smooth
react animation
JavaScript★ 286↓ 150M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
19Criticalhealth index
pulumi/esc
Pulumi ESC is a centralized, secure service for environments, secrets, and configuration management, optimized for multi-cloud infrastructures and applications.
Go★ 285Aug 6, 2026
Apache-2.0Aug 6, 2026 · metrics 2.10.0
npm · PyPI
48Weakhealth index
builder555/PineSAM
UI for Pinecil V2 - control it over BLE from your PC or your mobile.
Python · Vue · JavaScript★ 284Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
20At Riskhealth index
jonschlinkert/is-number
JavaScript/Node.js utility. Returns `true` if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.
JavaScript★ 284↓ 704M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
36Weakhealth index
abersheeran/a2wsgi
Convert WSGI app to ASGI app or ASGI app to WSGI app.
Python★ 283↓ 10.3M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
20At Riskhealth index
zertosh/loose-envify
Like envify but much faster
JavaScript★ 283↓ 451M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
36Weakhealth index
then/is-promise
Test whether an object looks like a promises-a+ promise
JavaScript★ 282↓ 281M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
CatLib/Framework
deprecated, use : https://github.com/CatLib/CatLib
C#★ 280Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
SergioBenitez/yansi
A dead simple ANSI terminal color painting library for Rust.
Rust★ 280↓ 17.1M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
Go
11Criticalhealth index
mitchellh/colorstring
Go (golang) library for colorizing strings for terminal output.
Go★ 280Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Go
15Criticalhealth index
mitchellh/reflectwalk
reflectwalk is a Go library for "walking" complex structures, similar to walking a filesystem.
Go★ 280Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
Azure/azure-sdk-for-ruby
Ruby SDK for Azure Resource Manager: build and manage your Azure cloud infrastructure (Compute, Virtual Networks, Storage, etc...) using Ruby.
Ruby★ 279Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
a-r-j/ProteinWorkshop
Benchmarking framework for protein representation learning. Includes a large number of pre-training and downstream task datasets, models and training/task utilities. (ICLR 2024)
Python · Jupyter Notebook★ 279Sep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
pycroscopy/pycroscopy
Scientific analysis of nanoscale materials imaging data
Jupyter Notebook★ 279Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
amphp/parallel-functions
Simplified parallel processing for PHP based on Amp.
PHP★ 278↓ 102.4K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
luniehq/lunie
Lunie is staking, simplified ✨
JavaScript · Vue★ 278Aug 16, 2026
Apache-2.0Aug 16, 2026 · metrics 2.10.0
Maven
12Criticalhealth index
gitskarios/GithubAndroidSdk
[DEPRECATED] Android SDK for Github API
Java★ 277Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
grantjenks/py-tree-sitter-languages
Binary Python wheels for all tree sitter languages.
Python · Shell★ 277↓ 29.5M/moAug 11, 2026
Custom licenseAug 11, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
finalduty/cis-benchmarks-audit
Simple command line tool to check for compliance against CIS Benchmarks
Python★ 276Aug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
florimondmanca/asgi-lifespan
Programmatic startup/shutdown of ASGI apps.
Python★ 276↓ 12.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
37Weakhealth index
sindresorhus/yn
Parse yes/no like values
JavaScript★ 275↓ 188M/moAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
PyPI · crates.io · npm +1
50Moderatehealth index
tree-sitter/tree-sitter-java
Java grammar for tree-sitter
JavaScript★ 275↓ 25.8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0