Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
35,426
Monthly downloads under inspection
378B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10 recordsRanked by popularity · browse by tag · record statistics
RubyGems
24Criticalhealth index
presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
Ruby★ 7,258Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
18Criticalhealth index
svaarala/duktape
Duktape - embeddable Javascript engine with a focus on portability and compact footprint
JavaScript · C★ 6,208Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
18Criticalhealth index
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
TypeScript★ 406↓ 205M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
crates.io
22Criticalhealth index
tailcallhq/gh-workflow
Write your github workflows in rust
Rust★ 176↓ 23.6K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
oceanprotocol/ocean.js
🦑 Ocean Protocol JavaScript library to privately & securely publish, exchange, and consume data.
TypeScript★ 118↓ 6,692/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
14Criticalhealth index
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
JavaScript★ 95↓ 495M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
15Criticalhealth index
blakeembrey/array-flatten
Flatten a multi-dimensional array in JavaScript.
JavaScript · TypeScript★ 86↓ 221M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
22Criticalhealth index
visual-framework/vf-core
A (primarily CSS) framework that targets needs of life science websites and services
Nunjucks · JavaScript · SCSS★ 27↓ 10.7K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm · Maven
12Criticalhealth index
ExodusForks/react-native-netinfo
React Native Network Info API for Android & iOS
JavaScript · Java · Objective-C★ 1↓ 3,137/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
8Criticalhealth index
ExodusForks/bigint-buffer
💪🔢 bigint-buffer: Buffer Utilities for TC39 BigInt Proposal
TypeScript★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0