Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,538
Monthly downloads under inspection
581B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,551 recordsRanked by popularity · browse by tag · record statistics
PyPI
20At Riskhealth index
sdispater/pytzdata
Official timezone database for Python.
Python★ 19↓ 20.4M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
NuGet · npm
13Criticalhealth index
serenity-is/common-features
Contains demo modules and common features shared between Serene and StartSharp
PLSQL · C# · TSQL★ 19Jul 25, 2026
No licenseJul 25, 2026 · metrics 2.10.0
crates.io
14Criticalhealth index
servo/core-text-rs
DEPRECATED - Rust bindings for CoreText.
Rust★ 19Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
Go
6Criticalhealth index
snapp-incubator/health-exporter
A prometheus exporter which provides metrics to check remote endpoints health.
Go★ 19Aug 18, 2026
Apache-2.0Aug 18, 2026 · metrics 2.10.0
npm
14Criticalhealth index
spdy-http2/handle-thing
The Thing when you need it
JavaScript★ 19Aug 31, 2026
No licenseAug 31, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
superfaktura/apiclient
SuperFaktúra oficiálny PHP-API klient.
PHP★ 19↓ 3,263/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
swgillespie/unicode-categories
A simple crate that allows for unicode categories can be queried for characters.
Rust★ 19↓ 5.3M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
theofidry/console
Library for creating CLI commands or applications
PHP★ 19↓ 114.4K/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
34At Riskhealth index
C++★ 19Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/data-response
No repository description published.
PHP★ 19↓ 14.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/rbac-db
yiisoft/db adapter for RBAC.
PHP★ 19↓ 2,898/moJul 29, 2026
BSD-3-ClauseJul 29, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
CoreCompat/libgdiplus-packaging
NuGet packages which include native builds of libgdiplus for macOS.
Shell · C# · C★ 18Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
41Weakhealth index
SpiNNakerManchester/spinnaker_tools
SpiNNaker API, sark, sc&mp, bmp firmware and build tools
C · Perl★ 18Sep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
Sylius/SyliusInventoryBundle
[READ-ONLY] Flexible inventory management for Symfony2 e-commerce applications.
PHP★ 18↓ 3,967/moSep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
PyPI
6Criticalhealth index
afonasev/flake8-plugin-utils
The package provides base classes and utils for flake8 plugin writing
Python★ 18↓ 910.2K/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
8Criticalhealth index
airano-ir/skillhub
Open-source marketplace for AI Agent skills
TypeScript★ 18↓ 3,222/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
16Criticalhealth index
artilleryio/artillery-plugin-publish-metrics
Moved to https://github.com/artilleryio/artillery/tree/main/packages/artillery-plugin-publish-metrics
JavaScript★ 18↓ 824.4K/moSep 9, 2026
No licenseSep 9, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
brigadecore/brigade-github-app
A Brigade v1.x compatible gateway for forwarding events from GitHub to Brigade
Go★ 18Aug 19, 2026
Apache-2.0Aug 19, 2026 · metrics 2.10.0
25At Riskhealth index
cappyzawa/starlark.vim
vim plugin for starlark
Vim Script★ 18Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
craftcms/ecs
Easy Coding Standard configurations for Craft CMS projects.
PHP★ 18↓ 20.4K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
crates.io
38Weakhealth index
crossterm-rs/crossterm-winapi
Crossterm Windows API Abstractions
Rust★ 18↓ 6.3M/moAug 11, 2026
MITAug 11, 2026 · metrics 2.10.0
npm
30At Riskhealth index
gamunu/vscode-opentofu
Visual Studio Code Extension without Terraform Cloud and Telemetry
TypeScript★ 18Jul 31, 2026
MPL-2.0Jul 31, 2026 · metrics 2.10.0
RubyGems · npm
25At Riskhealth index
glabix/ree
Ree Framework Monorepo
Ruby · TypeScript★ 18Jul 31, 2026
No licenseJul 31, 2026 · metrics 2.10.0
npm
32At Riskhealth index
gravity-ui/onboarding
No repository description published.
TypeScript★ 18↓ 9,593/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
18Criticalhealth index
iarna/has-unicode
Try to guess if your terminal supports unicode
JavaScript★ 18↓ 66M/moAug 31, 2026
ISCAug 31, 2026 · metrics 2.10.0
21At Riskhealth index
jawabuu/kloud-3s
Bootstrap a simple, secure kubernetes deployment on public cloud providers using terraform and k3s.
HCL★ 18Aug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
Go
19Criticalhealth index
kairos-io/kairos-agent
:wrench: Lifecycle agent for kairos
Go★ 18Sep 8, 2026
Apache-2.0Sep 8, 2026 · metrics 2.10.0
npm
18Criticalhealth index
microsoft/use-disposable
Creating instances in React during render that need to be disposed even with StrictMode
TypeScript★ 18↓ 383.7K/moSep 4, 2026
MITSep 4, 2026 · metrics 2.10.0