Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,086
Monthly downloads under inspection
622B
Median health index
59 Moderate
25,760 recordsRanked by popularity · browse by tag · record statistics
npm
59Moderatehealth index
holepunchto/bare-png
PNG support for Bare
C · JavaScript★ 4↓ 5,759/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
65Goodhealth index
holepunchto/bare-sidecar
Start and manage Bare sidecar processes from Node.js and Electron
JavaScript · C · CMake★ 4↓ 11.7K/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
57Moderatehealth index
JavaScript★ 4↓ 3,515/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
crates.io
42Weakhealth index
hsivonen/codepage
Placeholder for a mapping between Windows code page identifiers and encoding_rs Encodings
Rust★ 4↓ 1.4M/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
hsivonen/utf8_iter
Iterator by char over potentially-invalid UTF-8 in &[u8]
Rust★ 4↓ 52.1M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
51Moderatehealth index
ht-rnd/json-schema-editor
A React library for building JSON Schema editors, providing core logic, hooks and utilities along with customizable UI components for flexible schema creation and editing.
TypeScript★ 4↓ 8,025/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
65Goodhealth index
hugopalma17/webpilot
Reliable, fast and secure way to let your LLM control your browser, no disconnects, only one extension.
JavaScript★ 4↓ 228/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
38Weakhealth index
hybridly/laravel
[READ ONLY] Subtree split of the Laravel package from the Hybridly repository
PHP★ 4↓ 2,629/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
hyperf/contract
No repository description published.
PHP★ 4↓ 80K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
44Weakhealth index
hyperf/logger
No repository description published.
PHP★ 4↓ 59.1K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
iShape-Rust/iShape
iShape is a compact and efficient library specifically designed for representing 2D data structures using FixVec.
Rust★ 4Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
73Goodhealth index
ibexa/search
No repository description published.
PHP★ 4↓ 57.3K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
Go · npm
87Excellenthealth index
identrail/identrail
Machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Find risky trust paths, repository exposure, and authorization gaps before they become incidents.
Go · TypeScript★ 4Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
41Weakhealth index
igoogolx/lux-client
No repository description published.
TypeScript★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
91Excellenthealth index
indykite/indykite-sdk-go
IndyKite Platform SDK for Go
Go★ 4Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist · npm · PyPI
75Goodhealth index
infocyph/Epicrypt
Modern cryptography, token, password and data-protection toolkit for PHP.
PHP★ 4↓ 12K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
45Weakhealth index
inspect-js/available-typed-arrays
Returns an array of Typed Array names that are available in the current environment.
JavaScript★ 4↓ 371M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io · npm
67Goodhealth index
iopsystems/histogram
No repository description published.
Rust★ 4↓ 1.5M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
25At Riskhealth index
iotcomms/chai-sip
No repository description published.
JavaScript★ 4↓ 3,209/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
53Moderatehealth index
ipikuka/recma-mdx-escape-missing-components
Recma plugin to set the default value `() => null` for the Components in MDX in case of missing or not provided.
TypeScript · JavaScript★ 4↓ 3,668/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
86Excellenthealth index
ironcore-dev/controller-utils
Utility library for writing Kubernetes controllers
Go★ 4Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
47Weakhealth index
isaacs/minipass-pipeline
create a pipeline of streams using Minipass
TypeScript · JavaScript★ 4↓ 102M/moSep 16, 2026
BlueOak-1.0.0Sep 16, 2026 · metrics 2.10.0
Go
62Moderatehealth index
jackchuka/tfpacker
🧩 A Terraform file packer that organizes resource, module, data, and variable blocks into clean, rule-based .tf files. 💡 Supports custom grouping by type, name prefix, or both — with optional YAML config.
Go · HCL★ 4Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go · RubyGems
75Goodhealth index
jadercorrea/gptcode
Open-source coding CLI for repository-native, multi-model, verifiable engineering workflows.
Go★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
NuGet
30At Riskhealth index
jchristn/SlidingWindow
SlidingWindow provides an interface to retrieve chunks from a byte array using a sliding window.
C#★ 4Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm · Go · PyPI
63Moderatehealth index
jeffs-brain/memory
Open source memory library for AI agents
Go · TypeScript · Python★ 4↓ 32/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
35Weakhealth index
jhuckaby/pixl-server-user
A basic user login and session management system for the pixl-server framework.
JavaScript★ 4↓ 4,199/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm
35Weakhealth index
jridgewell/set-array
No repository description published.
TypeScript · JavaScript★ 4↓ 92.3M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0