Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,528
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,242 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
tabrindle/envinfo
Generate a report about your development environment for debugging and issue reporting
JavaScript★ 793↓ 74M/moAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Go
12Criticalhealth index
lesovsky/noisia
Harmful workload generator for PostgreSQL
Go★ 788Jul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
Envek/after_commit_everywhere
Use ActiveRecord transactional callbacks outside of models, literally everywhere in your application.
Ruby★ 786Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/block-ciphers
Collection of block cipher algorithms written in pure Rust
Rust★ 779↓ 28.4M/moAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
iNavFlight/inav-configurator
No repository description published.
JavaScript · HTML★ 771Aug 1, 2026
GPL-3.0Aug 1, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/traits
Collection of cryptography-related traits
Rust★ 750↓ 225M/moAug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
mindsdb/anton
self-improving agent
Python★ 743↓ 10.2K/moAug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
RubyGems
11Criticalhealth index
DmitryTsepelev/ar_lazy_preload
Lazy loading associations for the ActiveRecord models
Ruby★ 739Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
rmagick/rmagick
Ruby bindings for ImageMagick
C++ · Ruby★ 731Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
SciProgCentre/kmath
Kotlin mathematics extensions library
Kotlin★ 720Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
RubyGems
60Moderatehealth index
peterc/whatlanguage
Pure Ruby natural language detection library for 160+ languages.
Ruby★ 719Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
34At Riskhealth index
intel/intel-graphics-compiler
No repository description published.
C++ · LLVM · C★ 710Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
RubyGems
92Excellenthealth index
chef/ohai
Ohai profiles your system and emits JSON
Ruby★ 690Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
VahidN/iTextSharp.LGPLv2.Core
iTextSharp.LGPLv2.Core is an unofficial port of the last LGPL version of the iTextSharp (V4.1.6) to .NET Core
C#★ 680Sep 6, 2026
Custom licenseSep 6, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-app-basic
Yii 2.0 Basic Application Template
PHP★ 677↓ 4,700/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
SynthstromAudible/DelugeFirmware
Firmware for the Synthstrom Audible Deluge
C++ · C★ 669Jul 27, 2026
GPL-3.0Jul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-load-config
Autoload Config for PostCSS
JavaScript · TypeScript★ 663↓ 226M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
grahammendick/navigation
Scene-Based Navigation for React and React Native
TypeScript · JavaScript · Java★ 658Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/utils
Utility crates used in RustCrypto
Rust★ 655↓ 101M/moAug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0
Hex
45Weakhealth index
erlcloud/erlcloud
AWS APIs library for Erlang (Amazon EC2, S3, SQS, DDB, ELB and etc)
Erlang★ 651↓ 11.3K/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
RubyGems
65Goodhealth index
puppetlabs/facter
Collect and display system facts
Ruby★ 635Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Go
34At Riskhealth index
anywherelan/awl
Securely connect your devices into a private network. Mesh VPN, socks5 proxy server/client
Go★ 626Jul 24, 2026
MPL-2.0Jul 24, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/caniuse-lite
A smaller version of caniuse-db, with only the essentials!
JavaScript★ 613↓ 769M/moAug 4, 2026
CC-BY-4.0Aug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
gmpy2/gmpy2
General Multi-Precision arithmetic for Python (GMP, MPIR, MPFR, MPC)
C · Python★ 594↓ 544.4K/moJul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
SigmaHQ/pySigma
Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
Python★ 593↓ 516.5K/moAug 29, 2026
LGPL-2.1Aug 29, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
mrachinskiy/jewelcraft
Blender add-on for jewelry design
Python★ 578Aug 3, 2026
GPL-3.0Aug 3, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-random/getrandom
A small cross-platform library for retrieving random data from (operating) system source
Rust★ 570↓ 163M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
TheKevJames/coveralls-python
Show coverage stats online via coveralls.io
Python★ 569↓ 1.2M/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
13Criticalhealth index
shetabit/visitor
a laravel package to work with visitors and retrieve their informations
PHP★ 568↓ 29.1K/moAug 14, 2026
MITAug 14, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
RDFLib/sparqlwrapper
A wrapper for a remote SPARQL endpoint
Python★ 567↓ 1.3M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0