Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,318
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,761 recordsRanked by popularity · browse by tag · record statistics
Go
28Criticalhealth index
startfellows/tongo
Golang SDK for from Tonkeeper team
Go★ 315Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
20Criticalhealth index
polaris-gslb/polaris-gslb
A free, open source GSLB (Global Server Load Balancing) solution.
Python★ 312Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
PyPI
17Criticalhealth index
trezor/trezor-mcu
:lock: Don't use this repo, use the new monorepo instead:
C★ 312Jul 23, 2026
LGPL-3.0Jul 23, 2026 · metrics 1.13.0
Hex
26Criticalhealth index
absinthe-graphql/absinthe_phoenix
No repository description published.
Elixir★ 311↓ 178.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
arsenetar/send2trash
Python library to natively send files to Trash (or Recycle bin) on all platforms.
Python★ 311↓ 43.2M/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
scrapy/cssselect
CSS Selectors for Python
Python★ 309↓ 21.7M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
25Criticalhealth index
webpack/loader-runner
Runs (webpack) loaders
JavaScript★ 307↓ 182M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
16Criticalhealth index
Raynos/xtend
extend like a boss
JavaScript★ 306↓ 298M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
39At riskhealth index
colinodell/json5
UTF-8 compatible JSON5 parser for PHP
PHP★ 306↓ 1.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
wbolster/jsonlines
python library to simplify working with jsonlines and ndjson data
Python★ 305Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
windkh/node-red-contrib-telegrambot
Telegram bot nodes for node-red.
JavaScript★ 303↓ 12.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
premailer/css_parser
Ruby CSS Parser
Ruby★ 299Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
7Criticalhealth index
floatdrop/require-from-string
Load module from string
JavaScript★ 298↓ 452M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
microsoft/vscode-cordova
A Visual Studio Code extension providing intellisense, debug, and build support for Cordova and Ionic projects.
TypeScript★ 298Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
43At riskhealth index
sisinflab/elliot
Comprehensive and Rigorous Framework for Reproducible Recommender Systems Evaluation
Python★ 298Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
IntersectMBO/plutus-apps
The Plutus application platform
Haskell★ 297Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
24Criticalhealth index
publishlab/node-acme-client
Simple and unopinionated ACME client for Node.js
JavaScript★ 295↓ 567.7K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go · npm
38At riskhealth index
smart-mcp-proxy/mcpproxy-go
Supercharge AI Agents, Safely
Go★ 295Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
23Criticalhealth index
piotrmurach/tty-logger
A readable, structured and beautiful logging for the terminal
Ruby★ 293Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven · npm · RubyGems
27Criticalhealth index
wuba/taro-playground
The Taro Playground App is a cross-platform application developed using Taro, to help developers develop and debug Taro applications.
TypeScript★ 293Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
bizley/yii2-migration
Yii 2 Migration Creator And Updater
PHP★ 291↓ 4,308/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
NuGet
23Criticalhealth index
MizunagiKB/gd_cubism
Unofficial Live2D Player for Godot Engine
C++ · CSS★ 289Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
npm
47At riskhealth index
ehmicky/human-signals
Human-friendly process signals
JavaScript · TypeScript★ 286↓ 513M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
openSUSE/opi
OBS Package Installer (CLI)
Python★ 285Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
23Criticalhealth index
jonschlinkert/is-number
JavaScript/Node.js utility. Returns `true` if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.
JavaScript★ 284↓ 714M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
zertosh/loose-envify
Like envify but much faster
JavaScript★ 283↓ 434M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · crates.io · PyPI
36At riskhealth index
LTplus-AG/ifc-lite
Parse, view, query, edit, and export IFC, IDS, BCF, pointclouds and more AEC stuff. In the browser, server or desktop.
TypeScript · Rust · C#★ 282↓ 17.7K/moJul 21, 2026
MPL-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
dpranke/pyjson5
A Python implementation of the JSON5 data format
Python★ 282Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
ncr/rack-proxy
A request/response rewriting HTTP proxy. A Rack app.
Ruby★ 282Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
20Criticalhealth index
then/is-promise
Test whether an object looks like a promises-a+ promise
JavaScript★ 282↓ 256M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0