Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
42,382
Monthly downloads under inspection
384B
Median health index
57 Moderate
14,563 recordsRanked by popularity · browse by tag · record statistics
npm
17Criticalhealth index
psaren/taro-ui-vue
UI KIT for Taro/vue
SCSS · Vue · JavaScript★ 201↓ 723/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
crates.io
45At riskhealth index
sile/libflate
A Rust implementation of DEFLATE algorithm and related formats (ZLIB, GZIP)
Rust★ 201↓ 4.3M/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
PyPI
42At riskhealth index
sippy/b2bua
Sippy B2BUA is a RFC3261-compliant Session Initiation Protocol (SIP) stack and Back-to-back user agent (B2BUA) server software.
Python★ 201Jul 21, 2026
BSD-2-ClauseJul 21, 2026 · metrics 1.13.0
Packagist
63Moderatehealth index
symfony/type-info
Extracts PHP types information.
PHP★ 201↓ 6.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
40At riskhealth index
tapjs/signal-exit
when you want to fire an event no matter how a process exits.
TypeScript · JavaScript★ 201↓ 1B/moJul 22, 2026
BlueOak-1.0.0Jul 22, 2026 · metrics 1.13.0
npm
25Criticalhealth index
unclechu/node-deep-extend
Recursive extend module
JavaScript★ 201↓ 171M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
56Moderatehealth index
clue/reactphp-stdio
Async, event-driven and UTF-8 aware console input & output (STDIN, STDOUT) for truly interactive CLI applications, built on top of ReactPHP.
PHP★ 200↓ 296.3K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
72Goodhealth index
jgrss/geowombat
GeoWombat: Utilities for geospatial data
Jupyter Notebook★ 200↓ 233/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
69Moderatehealth index
microsoft/BotFramework-DirectLineJS
JavaScript client library for Microsoft Bot Framework's Direct Line protocol
TypeScript · JavaScript★ 200↓ 262.5K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
RubyGems
62Moderatehealth index
mogest/prawn-svg
SVG renderer for Prawn Ruby PDF library
Ruby★ 200Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
18Criticalhealth index
ziglang/zig-pypi
The Zig programming language, packaged for PyPI
Python★ 200Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
60Moderatehealth index
Brhiza/mingyu
八字、紫微、星盘、六爻、梅花、奇门、大六壬、小六壬、塔罗、雷诺曼、灵签、择日一站式排盘,输出结构化提示词与数据。提供公开 API、MCP Server 与 skill。
TypeScript★ 199↓ 4,554/moJul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
57Moderatehealth index
CZ-NIC/bird
BIRD Internet Routing Daemon
C★ 199Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
crates.io
73Goodhealth index
biandratti/huginn-net
Multi-protocol passive fingerprinting library: TCP/HTTP (p0f-style) + TLS (JA4-style) analysis in Rust
Rust★ 199↓ 7,674/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm
81Goodhealth index
box/box-node-sdk
A Javascript interface for interacting with the Box API. You can find the node package at
TypeScript★ 199↓ 747.9K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
isaacs/node-mkdirp
Recursively mkdir, like `mkdir -p`, but in node.js
TypeScript · JavaScript★ 199↓ 571M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
60Moderatehealth index
jbaicoianu/janusweb
An in-browser implementation of JanusVR
JavaScript · GLSL★ 199↓ 5,952/moJul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
npm
46At riskhealth index
mintlify/mdx
Mintlify markdown parser
TypeScript★ 199↓ 1.1M/moJul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
50Moderatehealth index
sindresorhus/detect-indent
Detect the indentation of code
JavaScript★ 199↓ 95.4M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
57Moderatehealth index
volcengine/volc-sdk-python
No repository description published.
Python★ 199Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI · npm
47At riskhealth index
samuelcolvin/smokeshow
create temporary websites
TypeScript · Python · SCSS★ 198Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
53Moderatehealth index
sindresorhus/is-wsl
Check if the process is running inside Windows Subsystem for Linux (Bash on Windows)
JavaScript★ 198↓ 449M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
56Moderatehealth index
sockudo/sockudo-ws
Ultra-low latency WebSocket library for HFT applications
Rust★ 198↓ 16.2K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
47At riskhealth index
vmunier/sbt-web-scalajs
SBT plugin to use Scala.js along with any sbt-web server.
Scala★ 198Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
69Moderatehealth index
HubSpot/hubspot-cli
A CLI for HubSpot
TypeScript★ 197↓ 124K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
51Moderatehealth index
STMicroelectronics/stm32f4xx-hal-driver
Provides the STM32Cube MCU Component "hal_driver" of the STM32F4 series.
C★ 197Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
59Moderatehealth index
egoroof/browser-id3-writer
JavaScript library for writing ID3 tag to MP3 files in browsers and Node.js
JavaScript★ 197↓ 120K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
74Goodhealth index
initia-labs/initia
Initia L1 source code
Go★ 197Jul 24, 2026
Custom licenseJul 24, 2026 · metrics 1.13.0
npm
67Moderatehealth index
nfriedly/set-cookie-parser
Parse HTTP set-cookie headers in JavaScript
JavaScript★ 197↓ 191M/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
PyPI
66Moderatehealth index
ninoseki/uv-dynamic-versioning
Dynamic versioning based on VCS tags for uv/hatch project
Python★ 197Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0