Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,500
Monthly downloads under inspection
386B
Median health index
57 Moderate
11,291 recordsRanked by popularity · browse by tag · record statistics
65Moderatehealth index
hmrc/catalogue-frontend
No repository description published.
Scala · HTML★ 8Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
PyPI
19Criticalhealth index
iiasa/message_doc
MESSAGEix-GLOBIOM documentation
TeX · Jupyter Notebook★ 8Jul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
infection/mutator
Mutator interface to implement custom mutators (mutation operators) for Infection
PHP · Makefile★ 8↓ 918.9K/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
46At riskhealth index
inspect-js/has-bigints
Determine if the JS environment has BigInt support.
JavaScript★ 8Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
52Moderatehealth index
inspect-js/is-boolean-object
Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
JavaScript★ 8↓ 322M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
52Moderatehealth index
inspect-js/is-number-object
Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
JavaScript★ 8↓ 295M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
57Moderatehealth index
inspect-js/typed-array-length
Robustly get the length of a Typed Array.
JavaScript★ 8↓ 295M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
61Moderatehealth index
interop-alliance/did-web-resolver
A did:web method Decentralized Identifier (DID) resolver driver for the did-io library.
TypeScript★ 8↓ 3,266/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
crates.io
60Moderatehealth index
jelmer/r-description-rs
Rust parser and editor for R DESCRIPTION files and R versions
Rust★ 8↓ 2,492/moJul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0
RubyGems
46At riskhealth index
jeremywrnr/deepmap
:milky_way: deep ruby hash/array map
Ruby★ 8Jul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
crates.io
66Moderatehealth index
joshrotenberg/tower-mcp
Tower-native Model Context Protocol (MCP) implementation
Rust★ 8↓ 4,407/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Maven
20Criticalhealth index
junxworks/junx
Junx toolkit是类似于google guava一样的工具包,辅助java开发人员开发应用程序,可以灵活构建服务器端应用程序,提供统一kv缓存接口封装,简单易懂的事件总线event bus,简单的生命周期管理接口service,常用工具类封装等。
Java★ 8Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Go
49At riskhealth index
jvqtil/gmfi
The ultimate files utility
Go★ 8Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
52Moderatehealth index
kiwicom/k8s-vault-operator
No repository description published.
Go★ 8Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 1.13.0
RubyGems
44At riskhealth index
kufu/textlint-ruby
Ruby AST parser for textlint-ruby-plugin
Ruby★ 8Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
NuGet
41At riskhealth index
kyleherzog/Blazicons.Lucide
The Lucide icon library packaged as Blazicons, SVG icon components for Blazor.
C#★ 8Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Packagist · npm
57Moderatehealth index
l3aro/filament-turnstile
Filament Turnstile is an essential plugin designed to seamlessly integrate Cloudflare's turnstile into your applications.
PHP · Blade★ 8↓ 3,158/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
NuGet
63Moderatehealth index
lahma/test262-harness-dotnet
A .NET version of test262 ECMAScript test harness
C#★ 8Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
75Goodhealth index
laminas/laminas-recaptcha
OOP wrapper for the ReCaptcha web service
PHP★ 8↓ 326.2K/moJul 27, 2026
BSD-3-ClauseJul 27, 2026 · metrics 1.13.0
npm
54Moderatehealth index
ljharb/safe-regex-test
Give a regex, get a robust predicate function that tests it against a string.
JavaScript★ 8↓ 324M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
60Moderatehealth index
lmilojevicc/seshagy
Agent-aware session manager for tmux & herdr — discover projects, launch sessions, and track your AI agents work.
Go★ 8Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
RubyGems
60Moderatehealth index
macuk/polish_invoicer
Creates polish invoices and proforms as HTML or PDF files
Slim★ 8Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
58Moderatehealth index
mantle-xyz/op-geth
No repository description published.
Go · C★ 8Jul 28, 2026
LGPL-3.0Jul 28, 2026 · metrics 1.13.0
npm
40At riskhealth index
mathiasbynens/unicode-match-property-value-ecmascript
Match a Unicode property or property alias to its canonical property name per the algorithm used for RegExp Unicode property escapes in ECMAScript.
JavaScript★ 8↓ 173M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
45At riskhealth index
mathiasbynens/unicode-property-aliases-ecmascript
Unicode property alias mappings in JavaScript format for property names that are supported in ECMAScript RegExp property escapes.
JavaScript★ 8↓ 159M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-authorization-rbac
RBAC permission adapter for mezzio-authorization
PHP★ 8↓ 5,605/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-csrf
CSRF token generation and validation for PSR-7 and PSR-15 applications using mezzio-session
PHP★ 8↓ 7,192/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0