Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,309
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,917 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
superglue-ai/superglue
superglue (YC W25) builds integrations and tools from natural language. Get production-grade tools for long tail and enterprise systems.
TypeScript★ 2,053Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven · RubyGems
34At Riskhealth index
mastodon/mastodon-android
Official Android app for Mastodon
Java★ 2,042Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
rabbitmq/amqp091-go
An AMQP 0-9-1 Go client maintained by the RabbitMQ team. Originally by @streadway: `streadway/amqp`
Go★ 2,037Sep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
81Excellenthealth index
microsoft/just
The task library that just works
TypeScript★ 2,026↓ 72.3K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
sindresorhus/clipboardy
Access the system clipboard (copy/paste)
JavaScript★ 1,983↓ 30.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
15Criticalhealth index
Starcounter-Jack/JSON-Patch
Lean and mean Javascript implementation of the JSON-Patch standard (RFC 6902). Update JSON documents using delta patches.
JavaScript · TypeScript★ 1,982↓ 30.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
getsentry/sentry-php
The official PHP SDK for Sentry (sentry.io)
PHP★ 1,913↓ 8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
mikependon/RepoDB
A production-ready data access platform for .NET applications.
C#★ 1,893Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
14Criticalhealth index
bripkens/connect-history-api-fallback
Fallback to index.html for applications that are using the HTML 5 history API
JavaScript★ 1,855↓ 66.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
shuchkin/simplexlsx
Parse and retrieve data from Excel XLSx files
PHP★ 1,829↓ 164.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io · Go · PyPI
34At Riskhealth index
dfinity/ic
Internet Computer blockchain source: the client/replica software run by nodes
Rust★ 1,792↓ 53K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
Kotlin/kotlinx.html
Kotlin DSL for HTML
Kotlin★ 1,755Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
que-etc/resize-observer-polyfill
A polyfill for the Resize Observer API
JavaScript★ 1,752↓ 55.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
JavaScript★ 1,751↓ 859M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
—
19Criticalhealth index
OpenNebula/one
The open source Cloud & Edge Computing Platform bringing real freedom to your Enterprise Cloud 🚀
JavaScript · C++ · Ruby★ 1,742Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
34At Riskhealth index
vega/ts-json-schema-generator
Generate JSON schema from your Typescript sources
TypeScript★ 1,715↓ 3.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
34At Riskhealth index
anyproto/any-sync
An open-source protocol enabling high-performance, local-first, peer-to-peer, end-to-end encrypted collaborative apps.
Go★ 1,705Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
NuGet
15Criticalhealth index
bezzad/Downloader
Fast, cross-platform and reliable multipart downloader with asynchronous progress events for .NET applications.
C#★ 1,705Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
34At Riskhealth index
toplenboren/simple-git-hooks
A simple git hooks manager for small projects
JavaScript★ 1,682↓ 3.1M/moOct 2, 2026
MITOct 2, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
atlassian-api/atlassian-python-api
Atlassian Python REST API wrapper. The atlassian-python-api library provides a simple and convenient way to interact with Atlassian products (such as Jira Service management, Jira Software, Confluence, Bitbucket and apps Insight, X-Ray) using Python. It is based on the official REST APIs of these products and by community for Atlassian
Python★ 1,670↓ 13.8M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
taiga-family/maskito
Collection of libraries to create an input mask which ensures that user types value according to predefined format.
TypeScript★ 1,665↓ 4.6M/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
Kodiqa-Solutions/VaultS3
Lightweight, S3-compatible object storage server with built-in web dashboard. Single binary, low memory, encryption at rest.
Go · TypeScript★ 1,635Oct 19, 2026
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/nanoevents
Simple and tiny (107 bytes) event emitter library for JavaScript
TypeScript · JavaScript★ 1,635↓ 4.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nginx/njs
A subset of JavaScript language to use in nginx
C · Perl★ 1,599Sep 15, 2026
BSD-2-ClauseSep 15, 2026 · metrics 2.10.0
Go · PyPI
34At Riskhealth index
zzet/gortex
High-performance code-intelligence engine for AI agents and IDE, supports 257 languages, multi repositories, based on graph, with access via CLI, MCP Server, and API. AI coding agents teammate - expose only needed information, cutting token usage up to 50x. 100% local. Discord: https://discord.gg/39MFHu3J5d
Go★ 1,575Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
tafia/quick-xml
Rust high performance xml reader and writer
Rust★ 1,567↓ 36.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
kovetskiy/mark
Sync your markdown files with Confluence pages.
Go★ 1,565Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
requests-cache/requests-cache
Persistent HTTP cache for python requests
Python★ 1,501↓ 7M/moSep 12, 2026
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0