Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,378
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,511 recordsRanked by popularity · browse by tag · record statistics
npm
32At Riskhealth index
wikimedia/service-runner
Generic nodejs service supervisor
JavaScript★ 25↓ 2,592/moOct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
Go
19Criticalhealth index
Azure/terraform-azurerm-hubnetworking
Terraform verified module for deploying multi-hub & spoke architectures
HCL · Go★ 24Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
ConradIrwin/interception
Listen to raise in ruby
Ruby · C★ 24Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
36Weakhealth index
KeisukeYamashita/go-vcl
🐇 VCL parser written in Go
Go★ 24Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
MetaMask/abi-utils
Lightweight utilities for encoding and decoding Solidity ABI
TypeScript★ 24↓ 1.1M/moSep 28, 2026
Apache-2.0Sep 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
OneKeyHQ/cross-inpage-provider
No repository description published.
TypeScript★ 24↓ 184.7K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
—
20At Riskhealth index
browsermt/marian-dev
Fast Neural Machine Translation in C++ - development repository
C++★ 24Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
—
25At Riskhealth index
bruceiv/egg
C++11 Parsing Expression Grammar Generator
C++★ 24Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems · npm
23At Riskhealth index
davidwessman/syntax_tree-erb
Syntax Tree support for ERB
Ruby★ 24Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dfinance/dvm
dfinance Virtual Machine for Move language
Rust★ 24Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
dspinhirne/netaddr-rb
A Ruby library for performing calculations on IPv4 and IPv6 subnets.
Ruby★ 24Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
glebm/popper_js-rubygem
Popper.js assets as a Ruby gem. https://popper.js.org/
Ruby★ 24Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
23At Riskhealth index
istanbuljs/append-transform
handle multiple require hooks
JavaScript★ 24↓ 29M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
25At Riskhealth index
jonschlinkert/arr-union
Returns an array of unique values using strict equality for comparisons, maintaining the same order as the provided arrays.
JavaScript★ 24↓ 54.8M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
31At Riskhealth index
jonschlinkert/expand-tilde
Bash-like tilde expansion for node.js. Expands a leading tilde in a file path to the user home directory, or `~+` to the cwd.
JavaScript★ 24↓ 67.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/union-value
Set an array of unique values as the property of an object. Supports setting deeply nested properties using using object-paths/dot notation. Node.js/JavaScript util.
JavaScript★ 24↓ 42.3M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
28At Riskhealth index
jsonjoy-com/json-pack
Fastest JSON serialization in native JavaScript. Works in browser and Node.js
TypeScript★ 24Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
28At Riskhealth index
knownasilya/cli-width
Fallback to a default if `process.stdout.getWindowSize` doesn't exist
JavaScript★ 24↓ 282M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
knu/webrobots
A Ruby library to help write robots.txt compliant web robots
Ruby★ 24Sep 11, 2026
BSD-2-ClauseSep 11, 2026 · metrics 2.10.0
NuGet
12Criticalhealth index
meziantou/WPFFontAwesome
Use FontAwesome in WPF application
C#★ 24Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
28At Riskhealth index
micromatch/is-extglob
Returns true if a string has an extglob
JavaScript★ 24Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
15Criticalhealth index
msobkyy/backbook-server
Mern Facebook Clone with real time Messages Server (MongoDB, Express.js, React.js, Node.js, and Socket.io)
JavaScript · Pug★ 24Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
23At Riskhealth index
netzkolchose/node-ansiparser
ANSI escape sequence parser for node.js and the browser.
JavaScript★ 24↓ 4,190/moOct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
npm
28At Riskhealth index
nexdrew/ansi-align
:abcd: align-text with ANSI support for CLIs
JavaScript★ 24↓ 103M/moOct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
Go
37Weakhealth index
sivchari/tenv
tenv detects environment variable not using t.Setenv
Go★ 24Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
spatie/Laravel-Excel
🚀 Supercharged Excel exports and imports in Laravel
PHP★ 24Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0