Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,438
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,302 recordsRanked by popularity · browse by tag · record statistics
Packagist
30At Riskhealth index
spryker/twig-extension
[READ ONLY] Subtree split of the TwigExtension module.
PHP★ 0↓ 21.9K/moJul 30, 2026
Custom licenseJul 30, 2026 · metrics 2.10.0
Packagist
33At Riskhealth index
spryker/util-network
[READ ONLY] Subtree split of the UtilNetwork module.
PHP★ 0↓ 25.7K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
Packagist
35Weakhealth index
spryker/util-text
[READ ONLY] Subtree split of the UtilText module.
PHP★ 0↓ 22K/moJul 30, 2026
Custom licenseJul 30, 2026 · metrics 2.10.0
16Criticalhealth index
stakater/keycloak-gatekeeper
A OpenID / Keycloak Proxy service
Go★ 0Aug 23, 2026
Custom licenseAug 23, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
stargaser/pyvo
An Astropy affiliated package providing access to remote data and services of the Virtual observatory (VO) using Python.
Python★ 0Jul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
staticssleever668/libratbag
A DBus daemon to configure input devices, mainly high-end and gaming mice
C · Python★ 0Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
9Criticalhealth index
steedos/cli
deploy and run your steedos apps
JavaScript★ 0↓ 3,904/moJul 18, 2026
No licenseJul 18, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
stepancheg/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
20At Riskhealth index
stephanlachnit/libratbag
A DBus daemon to configure gaming mice
C · Python★ 0Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
10Criticalhealth index
stephen-fox/ipcm
A Go library that provides tooling for orchestrating inter-process communication (IPC) on different operating systems.
Go★ 0Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
Go
25At Riskhealth index
stephenfin/gophercloud
Gophercloud: an OpenStack SDK for Go
Go★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
strandgren/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
npm
24At Riskhealth index
suneettipirneni/discord-api-types
Up to date Discord API Typings, versioned by the API version
TypeScript★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
Go
26At Riskhealth index
superhx/rocketmq-client-go
Apache RocketMQ go client
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Go
13Criticalhealth index
supperdoggy/spot-models
Models for homemade independent server
Go★ 0Jul 31, 2026
No licenseJul 31, 2026 · metrics 2.10.0
npm
32At Riskhealth index
svetlanabrennan/opentelemetry-js
OpenTelemetry JavaScript Client
TypeScript★ 0↓ 32K/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
syberant/ncollide
2 and 3-dimensional collision detection library in Rust
Rust★ 0Aug 24, 2026
BSD-3-ClauseAug 24, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
t0k0sh1/ry
No repository description published.
C++★ 0Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
crates.io
24At Riskhealth index
taiki-e/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
10Criticalhealth index
taktik/ozone-typescript-client
No repository description published.
TypeScript★ 0↓ 2,717/moJul 27, 2026
No licenseJul 27, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
tarcieri/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
18Criticalhealth index
tcanabrava/subsurface
Rough divelog in C and Gtk
C++ · C★ 0Jul 27, 2026
No licenseJul 27, 2026 · metrics 2.10.0
Go
16Criticalhealth index
tduffield/helmfile
Deploy Kubernetes Helm Charts
Go★ 0Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
14Criticalhealth index
technecloud/cronapp-framework-js
No repository description published.
JavaScript · HTML★ 0↓ 7,292/moJul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
tgamblin/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
npm
12Criticalhealth index
tgstation/vscode-dm-langclient
VS Code extension for SpacemanDMM's dm-langserver. Report issues on SpacemanDMM.
TypeScript★ 0Jul 31, 2026
GPL-3.0Jul 31, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
theGeoFis/pyBinSim
No repository description published.
Python★ 0Aug 24, 2026
MITAug 24, 2026 · metrics 2.10.0