Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,364
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,918 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
SynthstromAudible/DelugeFirmware
Firmware for the Synthstrom Audible Deluge
C++ · C★ 679Sep 14, 2026
GPL-3.0Sep 14, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
VahidN/iTextSharp.LGPLv2.Core
iTextSharp.LGPLv2.Core is an unofficial port of the last LGPL version of the iTextSharp (V4.1.6) to .NET Core
C#★ 679Oct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-app-basic
Yii 2.0 Basic Application Template
PHP★ 674↓ 4,941/moSep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
32At Riskhealth index
postcss/postcss-scss
SCSS parser for PostCSS.
JavaScript★ 672↓ 25.9M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/utils
Utility crates used in RustCrypto
Rust★ 671↓ 128M/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
smurfix/flask-script
Flask extension to help writing external scripts for Flask applications
Mixed★ 671↓ 434.5K/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-js
PostCSS for React Inline Styles, Free Style and other CSS-in-JS
JavaScript★ 667↓ 143M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
19Criticalhealth index
grahammendick/navigation
Scene-Based Navigation for React and React Native
TypeScript · JavaScript · Java★ 662Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-load-config
Autoload Config for PostCSS
JavaScript · TypeScript★ 662↓ 224M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
uxlfoundation/oneDAL
oneAPI Data Analytics Library (oneDAL)
C++★ 653Oct 16, 2026
Apache-2.0Oct 16, 2026 · metrics 2.10.0
Hex
43Weakhealth index
erlcloud/erlcloud
AWS APIs library for Erlang (Amazon EC2, S3, SQS, DDB, ELB and etc)
Erlang★ 651↓ 11.5K/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
RubyGems
62Moderatehealth index
puppetlabs/facter
Collect and display system facts
Ruby★ 634Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nalgeon/codapi-js
Interactive code examples for documentation, education and fun.
JavaScript★ 620↓ 2,642/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/caniuse-lite
A smaller version of caniuse-db, with only the essentials!
JavaScript★ 613↓ 744M/moSep 16, 2026
CC-BY-4.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
SigmaHQ/pySigma
Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
Python★ 601↓ 385.3K/moOct 21, 2026
LGPL-2.1Oct 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
gmpy2/gmpy2
General Multi-Precision arithmetic for Python (GMP, MPIR, MPFR, MPC)
C · Python★ 601↓ 461.4K/moSep 12, 2026
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
mrachinskiy/jewelcraft
Blender add-on for jewelry design
Python★ 594Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
mavinoo/laravelBatch
insert batch and update batch in laravel
PHP★ 592↓ 115.3K/moOct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-random/getrandom
A small cross-platform library for retrieving random data from (operating) system source
Rust★ 580↓ 187M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
NuGet
30At Riskhealth index
vknet/vk
Vkontakte API for .NET
C#★ 575Oct 15, 2026
MITOct 15, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
TheKevJames/coveralls-python
Show coverage stats online via coveralls.io
Python★ 569↓ 889.3K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
12Criticalhealth index
shetabit/visitor
a laravel package to work with visitors and retrieve their informations
PHP★ 568↓ 27K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
RDFLib/sparqlwrapper
A wrapper for a remote SPARQL endpoint
Python★ 567↓ 1.3M/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Koenkk/zigbee-herdsman
A Node.js Zigbee library
TypeScript★ 564↓ 44.3K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist · RubyGems
34At Riskhealth index
SocialConnect/auth
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
PHP★ 564↓ 19.6K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
15Criticalhealth index
siberiacancode/reactuse
🌌 reactuse the largest and most useful hook library
TypeScript · JavaScript★ 563↓ 37.3K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
thephpleague/openapi-psr7-validator
It validates PSR-7 messages (HTTP request/response) against OpenAPI specifications
PHP★ 562↓ 586.7K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tosuapp/tosu
osu! Stable and Lazer memory reader and PP counters provider
TypeScript · JavaScript★ 559Sep 19, 2026
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
10Criticalhealth index
eakoriakin/ionic-selectable
Ionic Selectable is an Ionic versatile and highly customizable component that serves as a replacement to Ionic Select, and allows to search items, including async search, create items, customize the layout with templates and much more. It provides an intuitive API and is easy to set up and use.
TypeScript · HTML★ 554↓ 20.6K/moOct 7, 2026
MITOct 7, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
KeRNeLith/QuikGraph
Generic Graph Data Structures and Algorithms for .NET
C#★ 553Sep 11, 2026
MS-PLSep 11, 2026 · metrics 2.10.0