Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,735
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,408 recordsRanked by popularity · browse by tag · record statistics
npm
17Criticalhealth index
dcos/dcos-ui
The UI for The Datacenter Operating System
TypeScript★ 256↓ 0/moAug 16, 2026
Apache-2.0Aug 16, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
evfro/polara
Recommender system and evaluation framework for top-n recommendations tasks that respects polarity of feedbacks. Fast, flexible and easy to use. Written in python, boosted by scientific python stack.
Python★ 256Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
16Criticalhealth index
moq/moq
The most popular and friendly mocking framework for .NET
C#★ 256Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 2.10.0
npm
27At Riskhealth index
browserify/node-util
node.js util module as a module
JavaScript★ 255↓ 176M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
Packagist · npm
25At Riskhealth index
felixfbecker/php-advanced-json-rpc
A more advanced PHP implementation of the JSONRPC Protocol 📞❗
PHP★ 255↓ 795.2K/moJul 22, 2026
ISCJul 22, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pytest-dev/pytest-subtests
unittest subTest() support and subtests fixture
Python★ 255↓ 4.8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/orca
Orchestration engine
Java · Groovy · Kotlin★ 255Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Maven
14Criticalhealth index
ACINQ/eclair-mobile
An Android wallet for the Lightning Network
C★ 254Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
RubyGems
36Weakhealth index
guard/rb-fsevent
FSEvents API with signals handled (without RubyCocoa)
C · Ruby★ 254Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
Marwes/schemafy
Crate for generating rust types from a json schema
Rust★ 253↓ 2.6M/moAug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
tokio-rs/valuable
No repository description published.
Rust★ 253↓ 22.1M/moAug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
Maven
10Criticalhealth index
xolstice/protobuf-maven-plugin
Maven Plugin that executes the Protocol Buffers (protoc) compiler
Java · Groovy★ 253Jul 30, 2026
Custom licenseJul 30, 2026 · metrics 2.10.0
NuGet
17Criticalhealth index
ferram4/Ferram-Aerospace-Research
Aerodynamics model for Kerbal Space Program
C#★ 252Aug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
ConnorAtherton/rb-readline
Pure-Ruby Readline Implementation
Ruby★ 250Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
Packagist · npm
12Criticalhealth index
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
PHP · Twig★ 250↓ 42K/moJul 24, 2026
No licenseJul 24, 2026 · metrics 2.10.0
npm
26At Riskhealth index
ganesshkumar/obsidian-table-editor
An Obsidian plugin to provide an editor for Markdown tables. It can open CSV data and data from Microsoft Excel, Google Sheets, Apple Numbers and LibreOffice Calc as Markdown tables from Obsidian Markdown editor.
TypeScript★ 250Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
48Weakhealth index
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
JavaScript★ 250↓ 652M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Maven
33At Riskhealth index
philburk/jsyn
Modular audio synthesizer library with unit generators in Java
Java★ 250Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 2.10.0
npm
36Weakhealth index
sindresorhus/load-json-file
Read and parse a JSON file
JavaScript · TypeScript★ 250↓ 101M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
27At Riskhealth index
szmarczak/http2-wrapper
Use HTTP/2 the same way like HTTP/1
JavaScript★ 250↓ 113M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
bxparks/bigquery-schema-generator
Generates the BigQuery schema from newline-delimited JSON or CSV data records.
Python★ 249↓ 815.1K/moAug 25, 2026
Apache-2.0Aug 25, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
blue-oil/blueoil
Bring Deep Learning to small devices
Python · C++★ 248Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
coletdjnz/yt-dlp-youtube-oauth2
[OBSOLETE] Plugin that adds OAuth2 login support to yt-dlp's YouTube extractors
Python★ 247Jul 27, 2026
UnlicenseJul 27, 2026 · metrics 2.10.0
RubyGems
33At Riskhealth index
chuckremes/ffi-rzmq
FFI bindings for ZeroMQ so the library can be used under JRuby and other FFI-compliant ruby runtimes
Ruby★ 245Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
PyPI
40Weakhealth index
rr-/screeninfo
Fetch location and size of physical screens.
Python★ 244↓ 14.7M/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm · PyPI
19Criticalhealth index
GoogleCloudPlatform/emblem
Archived: Emblem Giving is a sample application that demonstrates a serverless architecture with continuous delivery, and trouble recovery. :diamond_shape_with_a_dot_inside:
Python · JavaScript · Shell★ 241Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
blockdiag/blockdiag
No repository description published.
Python★ 241↓ 99.5K/moAug 19, 2026
Apache-2.0Aug 19, 2026 · metrics 2.10.0
Go
40Weakhealth index
d3fvxl/di
🛠 A full-featured dependency injection container for go programming language.
Go★ 241Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
konnco/filament-import
why import must use a template when you can import all files dynamically?
PHP★ 241↓ 2,443/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
npm
26At Riskhealth index
karthikv/purview
A server-side component framework. What if your React components ran on the server-side?
TypeScript★ 240↓ 253/moAug 14, 2026
MITAug 14, 2026 · metrics 2.10.0