Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,609
Monthly downloads under inspection
578B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,464 recordsRanked by popularity · browse by tag · record statistics
Go
26At Riskhealth index
agext/levenshtein
Levenshtein distance and similarity metrics with customizable edit costs and Winkler-like bonus for common prefix.
Go★ 92Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
jekyll/jekyll-avatar
A Jekyll plugin for rendering GitHub avatars
Ruby★ 92Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
jeremykawahara/derm7pt
Dermatology dataset composed of a diagnosis and seven-point checklist criteria labels
Jupyter Notebook★ 92Sep 8, 2026
Custom licenseSep 8, 2026 · metrics 2.10.0
NuGet
42Weakhealth index
kaby76/Antlr4BuildTasks
Third-party build tool for 'Official' Antlr4 tool and runtime parsers using .Net. Drop-in replacement for 'Antlr4cs' Antlr4 tool and build rules.
C#★ 92Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
mindplay-dk/middleman
Dead simple PSR-15 / PSR-7 middleware dispatcher
PHP★ 92↓ 11K/moJul 29, 2026
No licenseJul 29, 2026 · metrics 2.10.0
npm
19Criticalhealth index
auth0-lab/mdl
Parse and validate MDOC CBOR encoded binaries according to ISO 18013-5.
TypeScript★ 91↓ 12K/moSep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
25At Riskhealth index
benjamn/wryware
A collection of packages that are probably a little too clever. Use at your own wrisk.
TypeScript★ 91↓ 91.7M/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
11Criticalhealth index
jsdom/abab
Perfectly spec-compliant atob and btoa implementations
Mixed★ 91Aug 31, 2026
No licenseAug 31, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
raphaelstolt/php-jsonpointer
JSON Pointer implementation for PHP.
PHP★ 91↓ 675.1K/moAug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
rosscdh/mkdocs-markdownextradata-plugin
A MkDocs plugin that injects the mkdocs.yml extra variables into the markdown template
Python★ 91Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Go
30At Riskhealth index
yeya24/promlinter
No repository description published.
Go★ 91Aug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Packagist
12Criticalhealth index
FriendsOfBehat/Mink
PHP 5.3+ web browser emulator abstraction
PHP★ 90↓ 172.3K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
14Criticalhealth index
ddarriba/modeltest
Best-fit model selection
C++★ 90Sep 5, 2026
GPL-3.0Sep 5, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
dougal/base58
Base58 is a Ruby library/gem for converting ints to and from base58.
Ruby★ 90Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Go
42Weakhealth index
gorilla/css
Package gorilla/css is a CSS3 tokenizer.
Go★ 90Jul 30, 2026
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
sfackler/rust-socks
No repository description published.
Rust★ 90↓ 4.3M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
18Criticalhealth index
watr/mbeacon
Turn your mac into an iBeacon.
Swift★ 90Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
35Weakhealth index
JuliaPlanners/PDDL.jl
Julia parser, interpreter and compiler interface for the Planning Domain Definition Language (PDDL). Planners not included.
Julia★ 89Aug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
SimonSapin/rust-std-candidates
Candidates for inclusion in the Rust standard library
Rust★ 89↓ 5.3M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
Teichlab/Genes2Genes
Aligning gene expression trajectories of single-cell reference and query systems
Jupyter Notebook★ 89Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
20At Riskhealth index
andris9/encoding
Encode/decode strings with iconv-lite
JavaScript★ 89↓ 111M/moAug 29, 2026
Custom licenseAug 29, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
christian-oudard/htmltreediff
Structure-aware diff for html and xml documents
Python★ 89Aug 23, 2026
BSD-3-ClauseAug 23, 2026 · metrics 2.10.0
19Criticalhealth index
dart-archive/csslib
A library for parsing CSS.
Dart★ 89Aug 2, 2026
BSD-3-ClauseAug 2, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
pqzx/html2docx
Convert html to docx
Python · HTML★ 89Aug 19, 2026
MITAug 19, 2026 · metrics 2.10.0
npm
48Weakhealth index
syntax-tree/hast-util-to-jsx-runtime
hast utility to transform to preact, react, solid, svelte, vue, etc
JavaScript★ 89↓ 143M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
yoshuawuyts/fd-lock
Advisory cross-platform file locks using file descriptors
Rust★ 89↓ 4.3M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0