Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,777
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,351 recordsRanked by popularity · browse by tag · record statistics
PyPI
18Criticalhealth index
dfm/kplr
Tools for working with Kepler data using Python
Python★ 39Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Maven
48Weakhealth index
ethlo/itu
An extremely fast parser and formatter of standardized date and date-times supporting RFC-3339 (ISO-8601 profile) and more.
Java★ 39Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
21At Riskhealth index
mediachain/aleph
א: The mediachain universe manipulation engine
JavaScript★ 39↓ 59/moJul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
microsoft/jschema-to-python
Generate source code for a set of Python classes from a JSON schema.
Python★ 39Aug 19, 2026
MITAug 19, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
symplify/phpstan-extensions
'ignore' error format, solid Symfony SplFileInfo and other useful extensions for PHPStan
PHP★ 39↓ 283.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
thobbs/pure-sasl
A pure python SASL client
Python★ 39↓ 7M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
30At Riskhealth index
yargs/set-blocking
set blocking stdio and stderr ensuring that terminal output does not truncate
JavaScript★ 39↓ 192M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
npm · RubyGems
18Criticalhealth index
18F/federalist-uswds-jekyll
Reference implementation of USWDS 2.0 for Jekyll on Cloud.gov. Demo ->
SCSS · HTML★ 38Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
PrestaShop/circuit-breaker
A resilient PHP library that allows to safely make calls to external services
PHP★ 38↓ 200.1K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Go
57Moderatehealth index
ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
Go★ 38Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Hex
12Criticalhealth index
dashbitco/nimble_strftime
A simple and fast strftime-based datetime formatter
Elixir★ 38Jul 18, 2026
No licenseJul 18, 2026 · metrics 2.10.0
RubyGems
48Weakhealth index
discourse/discourse_theme
CLI helper for developing Discourse themes
Ruby★ 38Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
rust-vmm/vm-device
No repository description published.
Rust★ 38↓ 475/moSep 4, 2026
Apache-2.0Sep 4, 2026 · metrics 2.10.0
Go
26At Riskhealth index
yitter/idgenerator-go
idgenerator 的 Go 专项引用库。
Go★ 38Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
24At Riskhealth index
Cycling74/max-api
Low-level C-language application programming interface for Max
C++ · C★ 37Aug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
npm
25At Riskhealth index
Eyevinn/hls-ts-js
HLS MPEG-TS parser library in Javascript
JavaScript★ 37↓ 1,109/moJul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
npm
23At Riskhealth index
TooTallNate/util-deprecate
The Node.js `util.deprecate()` function with browser support
JavaScript★ 37↓ 611M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
alessiosavi/PyRecognizer
"A neural network to rule them all, a neural network to find them, a neural network to bring them all and verify if is you !!" (Face recognition tool)
Python★ 37Sep 1, 2026
MITSep 1, 2026 · metrics 2.10.0
npm
30At Riskhealth index
appcues/snabbdom-virtualize
Library for turning strings and DOM nodes into virtual DOM nodes compatible with snabbdom.
JavaScript★ 37↓ 32.3K/moSep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
dana-i2cat/opennaas
Open platform for Network as a Service resources.
Java★ 37Aug 2, 2026
LGPL-3.0Aug 2, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dtolnay/unsafe-libyaml
libyaml transpiled to rust by c2rust
Rust★ 37↓ 22M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
interpretml/slicer
Unified slicing for all Python data structures.
Python★ 37↓ 14M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
laminas/laminas-json
provides convenience methods for serializing native PHP to JSON and decoding JSON to native PHP
PHP★ 37↓ 784.9K/moJul 30, 2026
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
npm
19Criticalhealth index
lbl-srg/modelica-json
Modelica to JSON Parser
JavaScript · HTML★ 37Jul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
npm
36Weakhealth index
mbostock/internmap
Map and Set with automatic key interning
JavaScript★ 37↓ 332M/moAug 31, 2026
ISCAug 31, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
pydata/pydata-google-auth
A package providing helpers for authenticating to Google APIs.
Python★ 37Jul 30, 2026
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
silverstripe/silverstripe-widgets
Widgets subsystem for Silverstripe CMS
PHP · JavaScript★ 37↓ 4,695/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
11Criticalhealth index
sindresorhus/os-tmpdir
[DEPRECATED] Node.js os.tmpdir() ponyfill
JavaScript★ 37↓ 99.2M/moAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
17Criticalhealth index
stefanpenner/get-caller-file
No repository description published.
TypeScript★ 37↓ 496M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0