Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,080
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,449 recordsRanked by popularity · browse by tag · record statistics
npm
8Criticalhealth index
JavaScript★ 4↓ 3,085/moOct 12, 2026
No licenseOct 12, 2026 · metrics 2.10.0
—
9Criticalhealth index
FastReports/winforms-datavisualization
System.Windows.Forms.DataVisualization provides basic charting for WinForms applications.
C#★ 4Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
Fodoj/acts-as-taggable-on
A tagging plugin for Rails applications that allows for custom tagging along dynamic contexts.
Ruby★ 4Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
Lightning-Universe/Slack-Command-Bot-component
With this component you can create a Slack bot and enable interactivity with the Slash Commands.
Python★ 4Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
19Criticalhealth index
TypeScript★ 4Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
57Moderatehealth index
MetaMask/snap-watch-only
No repository description published.
TypeScript★ 4↓ 52.6K/moSep 28, 2026
Apache-2.0Sep 28, 2026 · metrics 2.10.0
npm
50Moderatehealth index
MetaMask/swappable-obj-proxy
No repository description published.
TypeScript · JavaScript★ 4↓ 207.8K/moSep 28, 2026
No licenseSep 28, 2026 · metrics 2.10.0
—
10Criticalhealth index
NDari/gocrunch
High performance numeric library in Go
Go★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
14Criticalhealth index
NextPKI/certscan
Auto-discovery agent for TLS certificates. Scans your local IPv4/IPv6 network and static hosts for HTTPS, SMTPS, IMAPS, and more. Reports certificate metadata via Webhook. Supports TLS, STARTTLS, SNI, and protocol tagging. You can't protect what you don't know you have.
Go · Python★ 4Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
PostHog/posthog-rrweb
a complete copy of rrweb allowing us to vary CI
TypeScript★ 4↓ 193.7K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm · crates.io
30At Riskhealth index
ProjectLibertyLabs/graph-sdk
SDK to interact with public and private graphs
Rust★ 4↓ 248/moOct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
25At Riskhealth index
RTradeLtd/testenv
🚧 configuration for spinning up Temporal test environments
Makefile★ 4Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm · Go
16Criticalhealth index
SilverFlin/DrDuck
No repository description published.
Go★ 4↓ 18/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Uniterra-Solutions/caelterra
Caelterra — Team standardisation plugin for Hermes Agent
Python★ 4Sep 24, 2026
MITSep 24, 2026 · metrics 2.10.0
NuGet
16Criticalhealth index
Vantiv/cnp-sdk-for-dotnet
.NET SDK to ease XML integrations with the Vantiv eCommerce platform
C#★ 4Sep 21, 2026
Custom licenseSep 21, 2026 · metrics 2.10.0
Go
26At Riskhealth index
WangNingkai/micli
💥Take XiaoMi Cloud Service to the command line
Go★ 4Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Packagist · npm
33At Riskhealth index
acquia/cohesion-theme
Acquia Cohesion minimal theme. A Cohesion enabled kickstarter theme for use within Cohesion projects.
Twig · CSS · SCSS★ 4↓ 37K/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
alexlarsson/docker
Docker - the open-source application container engine
Go★ 4Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
11Criticalhealth index
alibaba-archive/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Go★ 4Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
anoma/smooth-operator
Rust checked arithmetic without the visual clutter
Rust★ 4↓ 6,125/moOct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
—
14Criticalhealth index
arilamstein/choroplethrCaCensusTract
Shapefile, metadata and visualization functions for US Census Tracts in California
R★ 4Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
astroport-fi/terra-plus
Production Quality contracts under open source licenses
Rust★ 4Sep 17, 2026
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
aycabta/vterm-gem
No repository description published.
C · Ruby★ 4Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Hex
30At Riskhealth index
ayrat555/ex_pbkdf2
Password-Based Key Derivation Function v2 (PBKDF2) for Elixir by a Rust-based NIF
Elixir★ 4↓ 3,091/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm · crates.io
19Criticalhealth index
baekenough/oh-my-customcodex
Codex-native port of oh-my-customcode
TypeScript · Shell · JavaScript★ 4↓ 323/moOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
24At Riskhealth index
bahlo/generic-list-go
Go container/list but with generics.
Go★ 4Sep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
barryvdh/laravel
A PHP Framework For Web Artisans
PHP★ 4Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Hex · crates.io
22At Riskhealth index
benodiwal/bubblegum_nifs
Elixir interface for Metaplex Bubblegum compressed NFTs on Solana. This library provides functions to create, mint, and transfer compressed NFTs using the Metaplex Bubblegum program.
Elixir · Rust★ 4↓ 1,628/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0