Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,718
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,251 recordsRanked by popularity · browse by tag · record statistics
26Criticalhealth index
processone/stun
STUN and TURN library for Erlang / Elixir
Erlang★ 255Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
rstcheck/rstcheck
Checks syntax of reStructuredText and code blocks nested within it
Python★ 255Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist · npm
13Criticalhealth index
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
PHP · Twig★ 250↓ 42K/moJul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
RubyGems
25Criticalhealth index
michaelherold/benchmark-memory
Memory profiling benchmark style, for Ruby 2.1+
Ruby★ 250Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
JavaScript★ 249↓ 664M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
18Criticalhealth index
choptastic/qdate
Erlang date, time, and timezone management: formatting, conversion, and date arithmetic
Erlang★ 248Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
28Criticalhealth index
joomcode/redispipe
High-throughput Redis client for Go with implicit pipelining
Go★ 248Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
michaelfaith/eslint-plugin-package-json
Rules for consistent, readable, and valid package.json files. 🗂️
TypeScript · MDX★ 248↓ 983.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
plaid/plaid-ruby
Ruby bindings for Plaid
Ruby★ 247Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
chuckremes/ffi-rzmq
FFI bindings for ZeroMQ so the library can be used under JRuby and other FFI-compliant ruby runtimes
Ruby★ 245Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
sindresorhus/decamelize
Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow
JavaScript★ 244↓ 250M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
9Criticalhealth index
romis2012/aiohttp-socks
Proxy (HTTP, SOCKS) connector for aiohttp
Python★ 242Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
35At riskhealth index
aio-libs/aiohttp-jinja2
jinja2 template renderer for aiohttp.web
Python★ 241Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
guzzle/oauth-subscriber
Signs Guzzle requests using OAuth 1.0
PHP★ 240↓ 349.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
sajya/server
Implement the JSON-RPC 2.0 server specification for @Laravel
PHP★ 240↓ 22.5K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
Daydreamer-riri/vite-react-ssg
Static-site generation for React on Vite.
TypeScript★ 238↓ 172.5K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
lpender/bummr
Update your gems in separate commits. Identify any that fail your build.
Ruby★ 237Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
pillarjs/finalhandler
Node.js final http responder
JavaScript★ 237↓ 510M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/di
PSR-11 compatible DI container and injector
PHP★ 236↓ 41.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Hex
34At riskhealth index
erlef/oidcc
OpenId Connect client library in Erlang & Elixir
Erlang · Elixir★ 235↓ 34.7K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
17Criticalhealth index
getsentry/raven-csharp
Superseded by: https://github.com/getsentry/sentry-dotnet
C#★ 232Jul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 1.13.0
12Criticalhealth index
orange-cpp/omath
Cross-platform modern general purpose game/mods/cheats development framework written in C++23.
C++★ 229Jul 20, 2026
ZlibJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Nyholm/NSA
Writing test code should be simple
PHP★ 228↓ 102K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
Vizonex/Winloop
An Alternative library for uvloop compatability with windows
Cython · Python★ 228Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
30At riskhealth index
ajv-validator/ajv-formats
JSON Schema format validation for Ajv v8+
TypeScript★ 227↓ 440M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
29Criticalhealth index
gecko0307/dlib
Allocators, I/O streams, math, geometry, image and audio processing for D
D★ 226Jul 20, 2026
BSL-1.0Jul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
simple-keyboard/simple-keyboard-layouts
Multi-language virtual keyboard layouts for simple-keyboard
JavaScript · TypeScript★ 225↓ 89.3K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
22Criticalhealth index
isaacs/once
Run a function exactly one time
JavaScript★ 224↓ 542M/moJul 22, 2026
BlueOak-1.0.0Jul 22, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
omarryhan/aiogoogle
Async Google API Client + Async Google Auth
Python★ 224Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0