Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,209
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,307 recordsRanked by popularity · browse by tag · record statistics
PyPI
26At Riskhealth index
briancurtin/deprecation
A library to handle automated deprecations
Python★ 95↓ 68.6M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
12Criticalhealth index
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
JavaScript★ 95↓ 541M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
gtk-rs/glib
DEPRECATED, use https://github.com/gtk-rs/gtk-rs-core repository instead!
Rust★ 94Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
iden3/circomlibjs
Javascript library to work with circomlib circuits
JavaScript★ 94↓ 94.7K/moSep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
npm
33At Riskhealth index
sindresorhus/has-flag
Check if argv has a specific flag
JavaScript · TypeScript★ 94↓ 1.1B/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
ScaCap/action-surefire-report
Reports surefire test results as GitHub Pull Request Check
JavaScript · Java★ 93Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Packagist
42Weakhealth index
andalisolutions/anaf-php
ANAF PHP is a free PHP API client that allows you to interact with the ANAF Web Services.
PHP★ 93↓ 2,904/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
kesla/node-headless
Headless is a Node.js wrapper for Xvfb, the virtual framebuffer
JavaScript★ 93↓ 30.4K/moSep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
cshaa/filtrex
A simple, safe, JavaScript Filter Expression compiler for end-users
JavaScript★ 92↓ 1.7M/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
32At Riskhealth index
CAFxX/httpcompression
Go middleware to compress HTTP responses with Gzip, Deflate, Brotli, Zstandard, XZ/LZMA2, LZ4, and more..
Go★ 91Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
19Criticalhealth index
Dynatrace/dynatrace-oneagent-operator
Kubernetes/Openshift Operator for managing Dynatrace OneAgent deployments
Go★ 91Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
30At Riskhealth index
yeya24/promlinter
No repository description published.
Go★ 91Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
18Criticalhealth index
watr/mbeacon
Turn your mac into an iBeacon.
Swift★ 90Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
32At Riskhealth index
JuliaPlanners/PDDL.jl
Julia parser, interpreter and compiler interface for the Planning Domain Definition Language (PDDL). Planners not included.
Julia★ 89Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
SimonSapin/rust-std-candidates
Candidates for inclusion in the Rust standard library
Rust★ 89↓ 5.5M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
19Criticalhealth index
bbc/bmx
Library and utilities to read and write broadcasting media files. Primarily supports the MXF file format
C++★ 88Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
28At Riskhealth index
koopjs/winnow
Deprecated
JavaScript★ 88↓ 1,085/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Maven
21At Riskhealth index
ldbc/ldbc_graphalytics
Generic driver for LDBC Graphalytics implementation
Java★ 88Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
28At Riskhealth index
tidwall/json.c
Fast JSON parser for C
C★ 88Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
14Criticalhealth index
blakeembrey/array-flatten
Flatten a multi-dimensional array in JavaScript.
JavaScript · TypeScript★ 87↓ 211M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
protectai/nbdefense
Secure Jupyter Notebooks and Experimentation Environment
Python★ 87Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
QubitProducts/gcs-browser-upload
Resumable chunked uploads to Google Cloud Storage from the browser
JavaScript★ 86Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
openshift/openshift-client-python
A python library for interacting with OpenShift via the OpenShift client binary.
Python★ 86↓ 102.8K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
23At Riskhealth index
rofinn/FilePathsBase.jl
Filesystem path types in julia
Julia★ 86Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
43Weakhealth index
eggjs/schedule
Schedule plugin for egg
TypeScript★ 85↓ 2,167/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
30At Riskhealth index
gkz/levn
Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible
LiveScript★ 85↓ 555M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
rwaldron/temporal
Non-blocking, temporal task sequencing. For use with robots built with Johnny-Five
JavaScript★ 85↓ 10.8K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
25At Riskhealth index
JuliaGraphics/ColorTypes.jl
Basic color definitions and traits
Julia★ 84Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
old-storyai/tracing-wasm
`tracing` crate compatible `Subscriber` for reporting spans through browser `window.performance`
Rust★ 84Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0