Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,094
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,453 recordsRanked by popularity · browse by tag · record statistics
crates.io
17Criticalhealth index
a3750/uvconvertor
A tool generate compile_commands.json from keilMDK`s .uvprojx file.
Rust★ 5↓ 7/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Hex
30At Riskhealth index
am-kantox/antenna
The tiny framework to simplify work with events, based on `GenStage`
Elixir★ 5Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
bagel897/pytoolconfig
Python tool configuration
Python★ 5Sep 12, 2026
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
Go
19Criticalhealth index
beyondstorage/go-service-s3
Amazon S3 support for go-storage
Go★ 5Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
bluss/rawpointer
Extra methods for raw pointers
Rust★ 5↓ 9.3M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
bridgecrewio/python-hcl2
No repository description published.
Python · HCL★ 5↓ 3.9M/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
bump-sh/bump-ruby-cli
Old bump.sh ruby CLI - Please head to our new CLI https://github.com/bump-sh/cli
Ruby★ 5Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
24At Riskhealth index
cedar-lang/cedar
A lisp dialect
C++★ 5Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
chuckremes/ffi-rzmq-core
FFI wrapper around the zeromq libzmq C API. Utilized by other libraries to provide more Ruby-like API.
Ruby★ 5Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
19Criticalhealth index
ckeditor/ckeditor5-typing
Typing feature for CKEditor 5.
JavaScript★ 5Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
dblock/danger-toc
A danger.systems plugin for your markdown TOC.
Ruby★ 5Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
23At Riskhealth index
dhaavi/checkser
Checkser adds and verifies checksums on folder structures.
Go★ 5Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
digitickets/omnipay-stripe-checkout
Omnipay Stripe driver, using its Checkout process
PHP★ 5↓ 504/moOct 8, 2026
MITOct 8, 2026 · metrics 2.10.0
npm
37Weakhealth index
eartharoid/i18n
⚡ A super fast, small, and simple message localisation library
JavaScript · TypeScript★ 5↓ 1,596/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
20At Riskhealth index
enigma-dev/lgmplugin
Java based plugin allowing LateralGM to compile games using ENIGMA.
Java★ 5Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
16Criticalhealth index
frostyard/plow
debian package repository manager, 100% serverless with GH Actions and Pages
Go★ 5Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Go
22At Riskhealth index
g14a/cli
GitHub’s official command line tool
Go★ 5Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
—
16Criticalhealth index
glenveegee/PDBeCIF
Protein Data Bank in Europe (PDBe; http://pdbe.org) mmCif/CIF/STAR parser and API
Mixed★ 5Sep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
Packagist · npm
19Criticalhealth index
gocodebox/lifterlms-blocks
WordPress Editor (Gutenberg) blocks for LifterLMS.
JavaScript · PHP★ 5↓ 5,135/moOct 23, 2026
No licenseOct 23, 2026 · metrics 2.10.0
Go
16Criticalhealth index
hexops/gotextdiff
Unified text diffing in Go (copy of the internal diffing packages the officlal Go language server uses)
Go★ 5Sep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
Maven
13Criticalhealth index
hsu-aut/PLC-Simulation
Simulation of a Fischer-Technik lab plant that can be used to learn PLC programming
Java★ 5Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
16Criticalhealth index
iVis-at-Bilkent/layout-base
Basic layout model and some utilities for some Cytoscape.js layout extensions
JavaScript★ 5↓ 108M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
20At Riskhealth index
JavaScript★ 5↓ 63.8M/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
jewettaij/dlpdb
collect statistics from the entire PDB library
Python · Shell★ 5↓ 22/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
RubyGems
13Criticalhealth index
joakimk/dboard
Dashboard framework
Ruby★ 5Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
jordansissel/logstash
logstash - logs/event transport, processing, management, search.
Ruby★ 5Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0