Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,583
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,568 recordsRanked by popularity · browse by tag · record statistics
PyPI
21At Riskhealth index
Kukuster/SumStatsRehab
GWAS summary statistics files QC tool
Python★ 42Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
crates.io
22At Riskhealth index
YuitoSato/gh-asset
A CLI tool to download GitHub issue/PR assets using GitHub CLI authentication.
Rust★ 42Oct 25, 2026
Custom licenseOct 25, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
jdechalendar/gridemissions
Tools for power sector emissions tracking
Python · Jupyter Notebook★ 42Oct 8, 2026
MITOct 8, 2026 · metrics 2.10.0
Go
29At Riskhealth index
libp2p/go-yamux
No repository description published.
Go★ 42Sep 23, 2026
MPL-2.0Sep 23, 2026 · metrics 2.10.0
npm
26At Riskhealth index
marcuswestin/node-kafka
NOT MAINTAINED. See below:
JavaScript★ 42↓ 3,702/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
pmmp/NBT
PHP library for working with the NBT (Named Binary Tag) data storage format, as designed by Mojang.
PHP★ 42↓ 22.7K/moSep 13, 2026
LGPL-3.0Sep 13, 2026 · metrics 2.10.0
—
28At Riskhealth index
rdeits/CommonSubexpressions.jl
Naïve combined subexpression elimination in Julia
Julia★ 42Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
—
20At Riskhealth index
rejeep/git.el
An Elisp API for programmatically using Git
Emacs Lisp★ 42Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
semente/python-baseconv
Python module to convert numbers from base 10 integers to base X strings and back again.
Python★ 42↓ 1.7M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
shokai/event_emitter
Ruby port of EventEmitter from Node.js
Ruby★ 42Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
12Criticalhealth index
sindresorhus/path-is-absolute
Node.js 0.12 path.isAbsolute() ponyfill
JavaScript★ 42↓ 363M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/kork
Kork provides some basic service building blocks for Spinnaker.
Java · Kotlin★ 42Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
21At Riskhealth index
wrgl/wrgl
Git-like data versioning.
Go★ 42Oct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
Maven
18Criticalhealth index
yan74/afplib
JAVA Library for reading & writing AFP (Advanced Function Presentation) Files.
Java★ 42Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
—
34At Riskhealth index
DataDog/dd-opentracing-cpp
Datadog Opentracing C++ Client
C++★ 41Oct 25, 2026
Apache-2.0Oct 25, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
atlasphp/Atlas.Query
Query builders for Atlas.Pdo connections.
PHP★ 41↓ 2,479/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
axelf4/unicode-linebreak
󠁼💔 Implementation of the Unicode Line Breaking Algorithm in Rust
Rust★ 41↓ 7.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
css-modules/postcss-modules-values
Pass arbitrary constants between your module files
JavaScript★ 41↓ 104M/moOct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
npm
11Criticalhealth index
dominictarr/json-buffer
No repository description published.
JavaScript★ 41↓ 529M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
13Criticalhealth index
dwaite/cookiejar
Manage client-side HTTP cookies in Ruby
Ruby★ 41Sep 14, 2026
BSD-2-ClauseSep 14, 2026 · metrics 2.10.0
Go
41Weakhealth index
go-faster/city
go cityhash implementation
Go★ 41Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
14Criticalhealth index
google/orderedcode
No repository description published.
Go★ 41Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
—
6Criticalhealth index
huanghongxun/HMCLCPP
dustbin for hmcl c++
C · C++★ 41Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
jekyll/jekyll-commonmark
CommonMark generator for Jekyll
Ruby★ 41Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
npm
29At Riskhealth index
jonschlinkert/object.pick
(object pick) returns a filtered copy of an object with only the specified keys, exactly like `pick` from lo-dash / underscore.
JavaScript★ 41↓ 45.2M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
jsonapi-rb/jsonapi-renderer
Efficiently render JSON API documents.
Ruby★ 41Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
14Criticalhealth index
lezer-parser/highlight
Syntax highlighting from Lezer trees
TypeScript★ 41↓ 42.4M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0