Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,759
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,345 recordsRanked by popularity · browse by tag · record statistics
14Criticalhealth index
meskio/tudu
A comand line interface to manage hierarchical todos
C++★ 46Aug 13, 2026
GPL-3.0Aug 13, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
microsoft/sarif-python-om
Python classes for the SARIF object model
Python★ 46↓ 2.9M/moAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
necaris/python3-openid
Python 3 port of the python-openid library
Python★ 46Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
AltSysrq/rusty-fork
Run Rust tests in isolated subprocesses
Rust★ 45↓ 12M/moAug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
Go
18Criticalhealth index
Azure/terraform-azurerm-openai
Terraform module for deploying Azure OpenAI Service.
HCL★ 45Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
Iotic-Labs/py-ubjson
Universal Binary JSON draft-12 serializer for Python
Python · C★ 45Aug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
npm · Maven
25At Riskhealth index
NativeScript/capacitor
NativeScript for Capacitor
TypeScript · Java★ 45↓ 2,215/moAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
NuGet
40Weakhealth index
PepperDash/PepperDashCore
No repository description published.
C#★ 45Aug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
Go
15Criticalhealth index
axrona/anitr-cli
🚀 Terminalde Türkçe altyazılı anime arama ve izleme aracı
Go★ 45Aug 27, 2026
GPL-3.0Aug 27, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
dirs-dev/dirs-sys-rs
moved to https://codeberg.org/dirs/dirs-sys-rs
Rust★ 45↓ 24.6M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
19Criticalhealth index
faburaya/3fd
C++ Framework For Fast Development: OOP wrappers and helpers for OpenCL, SQLite, Microsoft RPC API (DCE), Windows Web Services API (SOAP), Extensible Storage Engine (ESENT) and Service Broker (SQL Server). Also: garbage collection, exception handling, logging, stack tracing and command line parser. Ports available from POSIX to Windows 10 Mobile.
C · C++★ 45Jul 25, 2026
MS-PLJul 25, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
linkml/linkml-runtime
Runtime support for linkml generated models
Python★ 45Jul 25, 2026
CC0-1.0Jul 25, 2026 · metrics 2.10.0
Packagist · npm
29At Riskhealth index
m-a-k-o/nova-custom-table-card
Simple Nova Card for Custom Tables
PHP · Vue★ 45↓ 7,214/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
ndf-zz/asfv1
Alternate Assembler for Spin Semi FV-1
Python★ 45↓ 146/moAug 20, 2026
MITAug 20, 2026 · metrics 2.10.0
RubyGems
11Criticalhealth index
sethvargo/cleanroom
(More) safely evaluate Ruby DSLs with cleanroom
Ruby★ 45Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
14Criticalhealth index
KWasm/kwasm-node-installer
Installs KWasm on Kubernetes nodes.
Shell · Dockerfile★ 44Jul 31, 2026
Apache-2.0Jul 31, 2026 · metrics 2.10.0
npm
25At Riskhealth index
domenic/path-is-inside
Tests whether one path is inside another path
JavaScript★ 44↓ 51.1M/moAug 31, 2026
Custom licenseAug 31, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ebeweber/flake8-mutable
flake8 extension for mutable default arguments
Python★ 44↓ 159.3K/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
19Criticalhealth index
googleapis/python-container
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-container
Mixed★ 44Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.10.0
npm
20At Riskhealth index
mrkmg/node-external-editor
Edit a string with the users preferred text editor using $VISUAL or $EDITOR
JavaScript · TypeScript★ 44↓ 89.2M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
nicoulaj/checksum-maven-plugin
Compute Maven project artifacts/dependencies/files checksum digests.
Java · Groovy★ 44Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
seanmonstar/want
No repository description published.
Rust★ 44↓ 40.8M/moAug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
16Criticalhealth index
teamcfadvance/ValidateThis
An object oriented validation framework for ColdFusion objects
ColdFusion · HTML★ 44Aug 6, 2026
No licenseAug 6, 2026 · metrics 2.10.0
22At Riskhealth index
tidwall/xv
An expression evaluator for C
C★ 44Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
timeweb/phpstan-enum
Enum class reflection extension for PHPStan
PHP★ 44↓ 47.2K/moAug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
npm
19Criticalhealth index
trycourier/courier-react
No repository description published.
TypeScript★ 44Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0