Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,592
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,290 recordsRanked by popularity · browse by tag · record statistics
PyPI · crates.io
33At Riskhealth index
TeamGraphix/swiflow
Rust binding of generalized and pauli flow finding algorithms
Rust · Python★ 2Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
14Criticalhealth index
TheThingsNetwork/eslint-config-ttn
Eslint config for use within The Things Network
JavaScript★ 2↓ 41/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
24At Riskhealth index
adbancroft/avr-fast-div
Optimized integer division for AVR hardware
C++★ 2Sep 5, 2026
LGPL-2.1Sep 5, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
addr-rs/psl-types
Common types for the public suffix implementation crates
Rust★ 2↓ 4.7M/moAug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
14Criticalhealth index
agentzh/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
C★ 2Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
PyPI · npm · Maven +2
33At Riskhealth index
aliyun/endpoint-util
No repository description published.
CMake · Python · PHP★ 2↓ 2.8M/moAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
RubyGems
5Criticalhealth index
azzimoda/raspishika
Telegram-бот для удобного расписания МПК ТИУ.
Ruby★ 2Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
15Criticalhealth index
bachya/advanced-ssh-config
:computer: assh: ssh wrapper using ProxyCommand that adds regex, aliases, gateways, includes, dynamic hostnames to SSH and ssh-config
Go★ 2Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Packagist · npm
21At Riskhealth index
barrelstrength/sprout
Sprout Marketing Suite modules for Craft CMS applications
PHP · Twig★ 2↓ 2,290/moJul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
bdraco/chacha20poly1305-reuseable
A reusable version of ChaCha20Poly1305 for use with cryptography and asyncio
Python★ 2Aug 19, 2026
Custom licenseAug 19, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
blowmage/minitest-rails
Minitest integration for Rails
Ruby★ 2Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
9Criticalhealth index
critical-path/stakeholders
Manage stakeholders like a pro!
Python · HTML★ 2Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
6Criticalhealth index
cuteant/CuteAnt.Extensions
No repository description published.
C#★ 2Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
npm
16Criticalhealth index
cytomine/Cytomine-js-client
Cytomine javascript client
JavaScript★ 2↓ 146/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Maven · RubyGems
30At Riskhealth index
datastax/bookkeeper
Apache Bookkeeper
Java★ 2Aug 26, 2026
Apache-2.0Aug 26, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
deeplycloudy/satpy
Python package for earth-observing satellite data processing
Python★ 2Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
7Criticalhealth index
duolingo/rollbar-ios
Objective-C library for crash reporting and logging with Rollbar.
Objective-C · Ruby★ 2Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
NuGet
37Weakhealth index
eQuantic/core
Implementations based on design patterns
C#★ 2Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
23At Riskhealth index
evstack/cometbft
CometBFT: A distributed, Byzantine fault-tolerant, deterministic state machine replication engine, and fork of Tendermint Core.
Go★ 2Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
19Criticalhealth index
expressots/shared
[Moved to expressots/expressots monorepo] Shared library for ExpressoTS modules 🐎
TypeScript · JavaScript★ 2Aug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
23At Riskhealth index
fab2s/FileLock
A fluent Helper to properly handle file locking based on flock()
PHP★ 2↓ 3,305/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
Hex
30At Riskhealth index
gridpoint-com/ostara
🐇 Transform Ecto schemas into JSON Schemas
Elixir★ 2↓ 2,037/moAug 15, 2026
MITAug 15, 2026 · metrics 2.10.0
npm · Go
20At Riskhealth index
hsanjuan/opencensus-go
A stats collection and distributed tracing framework
Go★ 2Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
26At Riskhealth index
ialexj/terraform-provider-sql
Terraform SQL Migrations with delayed connection
Go★ 2Aug 1, 2026
MPL-2.0Aug 1, 2026 · metrics 2.10.0
Go
15Criticalhealth index
ianling/giu
Cross platform rapid GUI framework for golang based on Dear ImGui.
Go★ 2Aug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
7Criticalhealth index
jebrosen/nseg
NCBI nseg, modified to be more compliant with recent C compilers
Objective-C · C★ 2Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
Go
19Criticalhealth index
kaptinlin/jsonpatch
Go library for JSON Patch (RFC 6902) with extended operations and JSON Predicate support
Go★ 2Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
mastodon/webpush
webpush, Encryption Utilities for Web Push protocol
Ruby★ 2Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0