Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,553
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,548 recordsRanked by popularity · browse by tag · record statistics
crates.io
36Weakhealth index
axelf4/unicode-linebreak
󠁼💔 Implementation of the Unicode Line Breaking Algorithm in Rust
Rust★ 41↓ 7.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
css-modules/postcss-modules-values
Pass arbitrary constants between your module files
JavaScript★ 41↓ 104M/moOct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
npm
11Criticalhealth index
dominictarr/json-buffer
No repository description published.
JavaScript★ 41↓ 529M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
13Criticalhealth index
dwaite/cookiejar
Manage client-side HTTP cookies in Ruby
Ruby★ 41Sep 14, 2026
BSD-2-ClauseSep 14, 2026 · metrics 2.10.0
Go
41Weakhealth index
go-faster/city
go cityhash implementation
Go★ 41Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
14Criticalhealth index
google/orderedcode
No repository description published.
Go★ 41Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
6Criticalhealth index
huanghongxun/HMCLCPP
dustbin for hmcl c++
C · C++★ 41Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
jekyll/jekyll-commonmark
CommonMark generator for Jekyll
Ruby★ 41Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/object.pick
(object pick) returns a filtered copy of an object with only the specified keys, exactly like `pick` from lo-dash / underscore.
JavaScript★ 41↓ 45.2M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
jsonapi-rb/jsonapi-renderer
Efficiently render JSON API documents.
Ruby★ 41Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
14Criticalhealth index
lezer-parser/highlight
Syntax highlighting from Lezer trees
TypeScript★ 41↓ 42.4M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Go
17Criticalhealth index
libp2p/go-libp2p-crypto
[DEPRECATED] Various cryptographic utilities used by libp2p; use https://github.com/libp2p/go-libp2p-core/ instead.
Go★ 41Oct 17, 2026
MITOct 17, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
minkphp/MinkZombieDriver
Zombie.js driver for Mink framework
PHP★ 41↓ 15.1K/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Packagist · RubyGems
19Criticalhealth index
paypal/PayPal-PHP-SDK
Deprecated in favor of:
PHP★ 41↓ 178.2K/moOct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
—
25At Riskhealth index
polaris-contrib/polaris-cpp
Lightweight C++ SDK used as Proxyless Service Governance
C++★ 41Oct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
Packagist
40Weakhealth index
potibm/phluesky
An small PHP library for Bluesky social using the AT Protocol.
PHP★ 41↓ 3,443/moOct 8, 2026
MITOct 8, 2026 · metrics 2.10.0
RubyGems
27At Riskhealth index
rack/rack-cache
No repository description published.
Ruby★ 41Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
RubyGems
16Criticalhealth index
resgraph/acts-as-dag
Directed Acyclic Graph hierarchy for Rail's ActiveRecord models
Ruby★ 41Oct 2, 2026
MITOct 2, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
rmax/databrewer
The missing datasets manager. Like hombrew but for datasets. CLI-tool for search and discover datasets!
Python · Makefile★ 41Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
16Criticalhealth index
scrutinizer-ci/ocular
CLI for uploading external code coverage data
PHP★ 41↓ 24.6K/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
shabbyrobe/grpc-stubs
gRPC typing stubs for Python
Python★ 41↓ 3.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
str0zzapreti/pytest-retry
A simple plugin for retrying flaky tests in CI environments
Python★ 41↓ 2.6M/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
4Criticalhealth index
tsung-sc/JDPurchaser
京东抢购GO语言实现版本,抢购效率比Python原版本要高上数倍(目前还在开发中,获取最新版请查看dev分支)
Go★ 41Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
tyrchen/codebank
A powerful code documentation generator that creates structured markdown documentation from your codebase. Supports multiple languages including Rust, Python, TypeScript, and C with intelligent parsing and formatting. Features test code filtering, summary generation, and customizable documentation strategies.
Rust★ 41↓ 43/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
npm
18Criticalhealth index
webpack/source-list-map
Fast line to line SourceMap generator.
JavaScript★ 41↓ 37M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
zentourist/gssapi
A Ruby FFI wrapper around GSSAPI
Ruby★ 41Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
19Criticalhealth index
BOXFoundation/boxd
Blockchain for BOX Payout
Go★ 40Sep 30, 2026
MITSep 30, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
Isaac-Lozano/radx
An ADX encoder/decoder written in Rust.
Rust★ 40Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0