Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,434
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,550 recordsRanked by popularity · browse by tag · record statistics
RubyGems
21At Riskhealth index
rails/ruby-coffee-script
Ruby CoffeeScript Compiler
Ruby · Shell · Roff★ 29Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Hex
29At Riskhealth index
ricn/zarex
Filename sanitization for Elixir
Elixir★ 29↓ 30.8K/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
—
24At Riskhealth index
sparkfun/SparkFun_Apollo3_AmbiqSuite_BSPs
One-stop-shop for all your AmbiqSuite SDK board support package needs.
C · Makefile★ 29Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
CheckerNetwork/zinnia
Runtime for worker nodes executing modules in a resource-limited sandbox
Rust · JavaScript★ 28↓ 141/moSep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
—
19Criticalhealth index
ELIFE-ASU/Inform
A cross platform C library for information analysis of dynamical systems
C★ 28Oct 13, 2026
MITOct 13, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
VladimirMarkelov/rclc
Mathematical expression calculator with big integers, floats, common fractions, and complex numbers support
Rust★ 28↓ 6/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
20At Riskhealth index
aleung/node-anyid
A simple and flexible API to generate various kinds of string ID / code.
TypeScript★ 28↓ 4,371/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
aptible/aptible-cli
[DEPRECATED] Old command line interface to Aptible. This has been replaced by a new CLI: https://www.aptible.com/docs/reference/aptible-cli/overview
Ruby★ 28Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
38Weakhealth index
beiko-lab/arete
AMR/VF LGT focused bacterial genomics analysis workflow
Python · Nextflow★ 28Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
22At Riskhealth index
browserify/publicEncrypt
publicEncrypt/privateDecrypt for browserify
JavaScript★ 28↓ 39.2M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
craftcms/plugin-installer
Composer installer for Craft CMS plugins.
PHP★ 28↓ 53K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
elspethsoup/persistent_httparty
Persistent HTTP connections for HTTParty!
Ruby★ 28Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
38Weakhealth index
google/s2a-go
No repository description published.
Go★ 28Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
25At Riskhealth index
graphprotocol/common-ts
Common TypeScript library for use in Graph Protocol components
TypeScript★ 28↓ 2,595/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
gruntwork-io/docs
Gruntwork docs files plus a set of tools to auto-generate a docs website from package markdown files.
JavaScript · TypeScript · CSS★ 28Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
28At Riskhealth index
here-be/snapdragon-node
Snapdragon utility for creating a new AST node in custom code, such as plugins.
JavaScript★ 28↓ 35.1M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
24At Riskhealth index
indutny/des.js
DES algorithm
JavaScript★ 28↓ 59.3M/moSep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
laminas/laminas-loader
Autoloading and plugin loading strategies
PHP★ 28↓ 878.7K/moSep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Go
26At Riskhealth index
moricho/tparallel
tparallel finds inappropriate usage of `t.Parallel()` method in your Go test codes
Go★ 28Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
8Criticalhealth index
octet-stream/form-data-encoder
Encode FormData content into the multipart/form-data format
TypeScript★ 28↓ 118M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go · PyPI
19Criticalhealth index
open-edge-platform/edge-node-agents
Agents installed as system services in the Edge Node OS
Go★ 28Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
10Criticalhealth index
pascalbros/IotaKit
IotaKit: The IOTA Swift API Library
Swift · C★ 28Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
rails-api/case_transform
Extraction of the key_transform abilities of ActiveModelSerializers
Ruby★ 28Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
scaccogatto/smooth-vuebar
[DEPRECATED — use overlayscrollbars-vue] Vue 3 directive wrapper for smooth-scrollbar (upstream unmaintained)
HTML · TypeScript · JavaScript★ 28↓ 82/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/modify-values
Modify the values of an object
JavaScript · TypeScript★ 28↓ 14.2M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
25At Riskhealth index
ssgreg/nlreturn
Checks for a new line before return and branch statements.
Go★ 28Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
20At Riskhealth index
sstur/draft-js-import-element
No repository description published.
Mixed★ 28Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
npm
25At Riskhealth index
tlvince/make-coverage-badge
Create a coverage badge
JavaScript★ 28↓ 146.3K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Hex
26At Riskhealth index
voltone/aws_rds_castore
AWS RDS CA certificate store for Elixir
Elixir★ 28↓ 38.1K/moOct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0