Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,417
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,545 recordsRanked by popularity · browse by tag · record statistics
—
21At Riskhealth index
NuGet/NuGet2
This is the home of nuget.core and all the repos from codeplex.
C# · JavaScript★ 89Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
SimonSapin/rust-std-candidates
Candidates for inclusion in the Rust standard library
Rust★ 89↓ 5.5M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
alexrothenberg/ammeter
A gem that allows for you to write specs for your Rails 3 generators
Ruby · Gherkin★ 89Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
christian-oudard/htmltreediff
Structure-aware diff for html and xml documents
Python★ 89↓ 51/moOct 20, 2026
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
—
19Criticalhealth index
dart-archive/csslib
A library for parsing CSS.
Dart★ 89Sep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Go
18Criticalhealth index
libp2p/go-libp2p-peerstore
an object to manage sets of peers, their addresses and other metadata
Go★ 89Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Hex
27At Riskhealth index
martinthenth/goal
A parameter validation library - based on Ecto
Elixir★ 89↓ 5,096/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
pqzx/html2docx
Convert html to docx
Python · HTML★ 89Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
23At Riskhealth index
tursodatabase/kysely-libsql
Kysely dialect for sqld
TypeScript★ 89Oct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
yoshuawuyts/fd-lock
Advisory cross-platform file locks using file descriptors
Rust★ 89↓ 4.9M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
19Criticalhealth index
bbc/bmx
Library and utilities to read and write broadcasting media files. Primarily supports the MXF file format
C++★ 88Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Hex
25At Riskhealth index
iodevs/qr_code
A library for generating QR code. https://hexdocs.pm/qr_code
Elixir★ 88↓ 45.7K/moOct 25, 2026
BSD-4-ClauseOct 25, 2026 · metrics 2.10.0
npm
28At Riskhealth index
koopjs/winnow
Deprecated
JavaScript★ 88↓ 1,085/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Maven
21At Riskhealth index
ldbc/ldbc_graphalytics
Generic driver for LDBC Graphalytics implementation
Java★ 88Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
25At Riskhealth index
maik/xml-simple
Easy API for working with XML documents
Ruby★ 88Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
mnmelo/lazy_import
A module for lazy loading of Python modules
Python★ 88↓ 114.9K/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
nftables-rs/nftables-rs
Safe abstraction for nftables JSON API (libnftables-json).
Rust★ 88↓ 185.5K/moSep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
40Weakhealth index
pytorch/expecttest
No repository description published.
Python★ 88Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
RubyGems · npm
19Criticalhealth index
simplecov-ruby/simplecov-html
HTML formatter for SimpleCov code coverage tool for ruby 1.9+
Ruby · CSS · TypeScript★ 88Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
28At Riskhealth index
tidwall/json.c
Fast JSON parser for C
C★ 88Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
SSheldon/rust-dispatch
Rust wrapper for Apple's Grand Central Dispatch.
Rust★ 87↓ 3.5M/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
Treinetic/ImageArtist
ImageArtist is a php gd Wrapper which makes Image manipulation insanely easy, we introduce ImageArtist as Photoshop for php
PHP★ 87↓ 1,637/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
14Criticalhealth index
blakeembrey/array-flatten
Flatten a multi-dimensional array in JavaScript.
JavaScript · TypeScript★ 87↓ 211M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
48Weakhealth index
containerd/fifo
fifo pkg for Go
Go★ 87Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
29At Riskhealth index
devcontainers/action
GitHub Action to build & publish your own dev container assets
TypeScript★ 87Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
21At Riskhealth index
felipfr/linkedin-mcpserver
A powerful Model Context Protocol server for LinkedIn API integration
TypeScript★ 87Sep 24, 2026
MITSep 24, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
httpsoft/http-message
Strict and fast implementation of PSR-7 and PSR-17
PHP★ 87↓ 45K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
21At Riskhealth index
jamiebuilds/spawndamnit
Take care of your spawn()
JavaScript★ 87Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
jazzband/pathlib2
Backport of pathlib aiming to support the full stdlib Python API.
Python★ 87↓ 3.6M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0