Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,779
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,572 recordsRanked by popularity · browse by tag · record statistics
—
31At Riskhealth index
rafaqz/Interfaces.jl
Macros to define and implement interfaces, to ensure they are checked and correct.
Julia★ 104Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
Drekin/win-unicode-console
A Python package to enable Unicode support when running Python from Windows console.
Python★ 103↓ 546.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
JuliaML/MLDataUtils.jl
Utility package for generating, loading, splitting, and processing Machine Learning datasets
Julia★ 103Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
—
23At Riskhealth index
betaveros/paradoc
GolfScript/CJam-inspired stack-based programming language that can be golfed or written literately*
Python★ 103Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
busyloop/powerbar
The last progressbar-library you'll ever need
Ruby★ 103Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
npm
25At Riskhealth index
epoberezkin/json-schema-traverse
Traverse JSON Schema passing each schema object to callback
JavaScript★ 103↓ 1.2B/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
24At Riskhealth index
fguillen/simplecov-rcov
SimpleCov formatter to generate a simple index.html Rcov style
Ruby · HTML · CSS★ 103Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
npm
21At Riskhealth index
jensyt/imurmurhash-js
An incremental implementation of MurmurHash3 for JavaScript
JavaScript★ 103↓ 552M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
48Weakhealth index
jshttp/compressible
Compressible Content-Type / mime checking.
JavaScript★ 103↓ 154M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
ronaldoussoren/macholib
macholib can be used to analyze and edit Mach-O headers, the executable format used by Mac OS X. It's typically used as a dependency analysis tool, and also to rewrite dylib references in Mach-O headers to be @executable_path relative. Though this tool targets a platform specific file format, it is pure python code that is platform and endian independent.
Python★ 103Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
servo/heapsize
In support of measuring heap allocations in Rust programs.
Rust★ 103↓ 80.8K/moSep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
35Weakhealth index
RedKenrok/node-audiorecorder
Audio recorder for Node.js, delivers a 16-bit signed-integer linear pulse modulation WAV stream.
JavaScript★ 102↓ 12.6K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
XanaduAI/MrMustard
A differentiable bridge between phase space and Fock space
Python★ 102Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
23At Riskhealth index
bcoin-org/bcrypto
JS crypto library
JavaScript · C★ 102↓ 57.8K/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
21At Riskhealth index
browserify/randombytes
random bytes from browserify stand alone
JavaScript★ 102↓ 129M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
chriskonnertz/string-calc
PHP calculator library for mathematical terms (expressions) passed as strings
PHP★ 102↓ 18.1K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
18Criticalhealth index
hashicorp/terraform-provider-postgresql
As part of our introduction to self-service publishing in the Terraform Registry, this copy of the provider has been archived, and ownership has been transferred to active maintainers in the community. Please see the new location on the Terraform Registry: https://registry.terraform.io/providers/cyrilgdn/postgresql
Go★ 102Oct 19, 2026
MPL-2.0Oct 19, 2026 · metrics 2.10.0
npm
18Criticalhealth index
holtwick/bx-mac
Sandbox any macOS app — only your project directory stays accessible
TypeScript★ 102↓ 601/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
29At Riskhealth index
koopjs/FeatureServer
An open source Geoservices Implementation (deprecated)
JavaScript★ 102↓ 783/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
lndk-org/lndk
No repository description published.
Rust★ 102Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
mayn/packerlicious
use python to make hashicorp packer templates
Python★ 102↓ 159/moOct 12, 2026
Apache-2.0Oct 12, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
phausamann/sklearn-xarray
Metadata-aware machine learning.
Python★ 102Sep 22, 2026
BSD-3-ClauseSep 22, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
sighingnow/libclang
(Unofficial) Release libclang (clang.cindex) on pypi.
Python★ 102↓ 10.2M/moSep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
Packagist · npm
66Goodhealth index
silverstripe/silverstripe-blog
Blog module for Silverstripe CMS
PHP★ 102↓ 13.9K/moSep 12, 2026
BSD-2-ClauseSep 12, 2026 · metrics 2.10.0
npm
40Weakhealth index
wessberg/ts-evaluator
An interpreter for Typescript that can evaluate an arbitrary Node within a Typescript AST
TypeScript★ 102↓ 1.6M/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
wraith-wireless/PyRIC
Python wireless library for Linux
Python★ 102↓ 447.9K/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
chrisrude/oobabot
A Discord bot which talks to Large Language Model AIs running on oobabooga's text-generation-webui
Python★ 101↓ 33/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
40Weakhealth index
click-contrib/click-didyoumean
Enable git-like did-you-mean feature in click :sparkles:
Python★ 101↓ 41.5M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0