Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,763
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,343 recordsRanked by popularity · browse by tag · record statistics
PyPI
30At Riskhealth index
rmax/databrewer
The missing datasets manager. Like hombrew but for datasets. CLI-tool for search and discover datasets!
Python · Makefile★ 41Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
scrutinizer-ci/ocular
CLI for uploading external code coverage data
PHP★ 41↓ 16.9K/moAug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
shabbyrobe/grpc-stubs
gRPC typing stubs for Python
Python★ 41↓ 3.4M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
Go
4Criticalhealth index
tsung-sc/JDPurchaser
京东抢购GO语言实现版本,抢购效率比Python原版本要高上数倍(目前还在开发中,获取最新版请查看dev分支)
Go★ 41Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
tyrchen/codebank
A powerful code documentation generator that creates structured markdown documentation from your codebase. Supports multiple languages including Rust, Python, TypeScript, and C with intelligent parsing and formatting. Features test code filtering, summary generation, and customizable documentation strategies.
Rust★ 41↓ 51/moAug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
Maven
18Criticalhealth index
yan74/afplib
JAVA Library for reading & writing AFP (Advanced Function Presentation) Files.
Java★ 41Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
amphp/log
Non-blocking logging for PHP based on Amp and Monolog.
PHP★ 40↓ 82.9K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
cloudfoundry/service-fabrik-broker
Cloud Foundry service broker which provisions service instances as Docker containers and BOSH deployments.
JavaScript · Go★ 40Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Go
31At Riskhealth index
fhs/go-netcdf
Go binding for the netCDF C library.
Go★ 40Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
npm
21At Riskhealth index
gammasoft/ie
Biblioteca de validação de inscrições estaduais em JavaScript (browser e node.js)
JavaScript★ 40↓ 3,385/moJul 28, 2026
No licenseJul 28, 2026 · metrics 2.10.0
Go
31At Riskhealth index
go-simpler/musttag
🚔 Enforce field tags in (un)marshaled structs
Go★ 40Aug 29, 2026
MPL-2.0Aug 29, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
mcfletch/pydispatcher
Observable signal implementation for python
Python★ 40↓ 3.2M/moAug 24, 2026
Custom licenseAug 24, 2026 · metrics 2.10.0
Hex
32At Riskhealth index
xward/phoenix_ddos
ddos protection for elixir phoenix project
Elixir★ 40↓ 2,009/moAug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0
npm
20At Riskhealth index
zhs007/getcomic
getcomic - 漫画打包器
JavaScript★ 40↓ 130/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Maven
14Criticalhealth index
BMDSoftware/neji
Flexible and powerful platform for biomedical information extraction from text
JavaScript · Java★ 39Aug 1, 2026
No licenseAug 1, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
Isaac-Lozano/radx
An ADX encoder/decoder written in Rust.
Rust★ 39Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
blancks/fast-jsonpatch-php
Class designed to handle JSON Patch operations in accordance with the RFC 6902 specification
PHP★ 39↓ 6,055/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
coderanger/rspec-command
rspec-command is a helper module for using RSpec to test command-line applications.
Ruby★ 39Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
dfm/kplr
Tools for working with Kepler data using Python
Python★ 39Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Maven
48Weakhealth index
ethlo/itu
An extremely fast parser and formatter of standardized date and date-times supporting RFC-3339 (ISO-8601 profile) and more.
Java★ 39Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
21At Riskhealth index
mediachain/aleph
א: The mediachain universe manipulation engine
JavaScript★ 39↓ 59/moJul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
microsoft/jschema-to-python
Generate source code for a set of Python classes from a JSON schema.
Python★ 39Aug 19, 2026
MITAug 19, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
symplify/phpstan-extensions
'ignore' error format, solid Symfony SplFileInfo and other useful extensions for PHPStan
PHP★ 39↓ 283.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
thobbs/pure-sasl
A pure python SASL client
Python★ 39↓ 7M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
30At Riskhealth index
yargs/set-blocking
set blocking stdio and stderr ensuring that terminal output does not truncate
JavaScript★ 39↓ 192M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
npm · RubyGems
18Criticalhealth index
18F/federalist-uswds-jekyll
Reference implementation of USWDS 2.0 for Jekyll on Cloud.gov. Demo ->
SCSS · HTML★ 38Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
PrestaShop/circuit-breaker
A resilient PHP library that allows to safely make calls to external services
PHP★ 38↓ 200.1K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Go
57Moderatehealth index
ckaznocha/intrange
intrange is a program for checking for loops that could use the Go 1.22 integer range feature.
Go★ 38Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Hex
12Criticalhealth index
dashbitco/nimble_strftime
A simple and fast strftime-based datetime formatter
Elixir★ 38Jul 18, 2026
No licenseJul 18, 2026 · metrics 2.10.0