Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,740
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,478 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At Riskhealth index
microsoft/tolerant-php-parser
An early-stage PHP parser designed for IDE usage scenarios.
PHP★ 895↓ 197.8K/moAug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
Go
32At Riskhealth index
nytimes/gziphandler
Go middleware to gzip HTTP responses
Go★ 892Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
RubyGems · npm
35Weakhealth index
aviflombaum/shadcn-rails
No repository description published.
HTML · Ruby · JavaScript★ 888Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
50Moderatehealth index
estools/esquery
ECMAScript AST query library.
JavaScript★ 888↓ 564M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
NuGet
12Criticalhealth index
NModbus4/NModbus4
NModbus4 is a C# implementation of the Modbus protocol. This project is archived in favor of https://github.com/NModbus/NModbus
C#★ 885Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/django-nose
Django test runner using nose
Python★ 884↓ 291.7K/moAug 19, 2026
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
npm
31At Riskhealth index
beatgammit/base64-js
Base64 encoding/decoding in pure JS
JavaScript★ 881↓ 523M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
17Criticalhealth index
deathau/sliding-panes-obsidian
Andy Matuschak Mode as a plugin
TypeScript · SCSS★ 879Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
qruto/laravel-wave
Painless Laravel Broadcasting with SSE
PHP★ 879↓ 3,033/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Go
34At Riskhealth index
quasilyte/go-ruleguard
Define and run pattern-based custom linting rules.
Go★ 875Jul 30, 2026
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
scikit-fuzzy/scikit-fuzzy
Fuzzy Logic SciKit (Toolkit for SciPy)
Python★ 874↓ 199.1K/moSep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
bjeavons/zxcvbn-php
Realistic PHP password strength estimate library based on Zxcvbn JS
PHP★ 873↓ 580.3K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
scour-project/scour
Scour - An SVG Optimizer / Cleaner
Python★ 872↓ 129.4K/moJul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
Go
10Criticalhealth index
flyingmutant/rapid
Rapid is a modern Go property-based testing library
Go★ 870Aug 29, 2026
MPL-2.0Aug 29, 2026 · metrics 2.10.0
28At Riskhealth index
MyraUI/Myra
UI Library for MonoGame, FNA and Stride
C#★ 868Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
berkerpeksag/astor
Python AST read/write
Python★ 865↓ 30.2M/moAug 27, 2026
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
30At Riskhealth index
StevenBaby/onix
Onix - 操作系统实现
C★ 863Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
dabeaz/sly
Sly Lex Yacc
Python★ 863Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
Go
19Criticalhealth index
42atomys/stud42
Stud42 official repository since major 3 update (https://s42.app)
TypeScript · HCL · Go★ 860Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
beeware/voc
A transpiler that converts Python code into Java bytecode
Python · Java★ 860Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 2.10.0
18Criticalhealth index
douban/beansdb
Archived, see GoBeansDB instead.
C · Python★ 859Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
rtomayko/shotgun
reloading rack development server / forking version of rackup
Ruby★ 859Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
wolever/parameterized
Parameterized testing with any Python test framework
Python★ 856↓ 19.6M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
toretore/barby
The Ruby barcode generator
Ruby★ 855Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
21At Riskhealth index
jthuraisamy/TelemetrySourcerer
Enumerate and disable common sources of telemetry used by AV/EDR.
C++★ 854Aug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
alteryx/evalml
EvalML is an AutoML library written in python.
Python★ 852↓ 9,780/moAug 24, 2026
BSD-3-ClauseAug 24, 2026 · metrics 2.10.0
Maven
31At Riskhealth index
BluSunrize/ImmersiveEngineering
Wires, transformers, high voltage! Bzzzzt!
Java★ 849Sep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
mrocklin/multipledispatch
Multiple dispatch
Python★ 847↓ 4.9M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
jonhoo/bus
Efficient, lock-free, bounded Rust broadcast channel
Rust★ 846↓ 105.2K/moSep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
doug-martin/nestjs-query
Easy CRUD for GraphQL.
TypeScript★ 842↓ 111.2K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0