Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,346
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,280 recordsRanked by popularity · browse by tag · record statistics
crates.io
17Criticalhealth index
tarcieri/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
18Criticalhealth index
tcanabrava/subsurface
Rough divelog in C and Gtk
C++ · C★ 0Jul 27, 2026
No licenseJul 27, 2026 · metrics 2.10.0
Go
16Criticalhealth index
tduffield/helmfile
Deploy Kubernetes Helm Charts
Go★ 0Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
14Criticalhealth index
technecloud/cronapp-framework-js
No repository description published.
JavaScript · HTML★ 0↓ 7,292/moJul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
tgamblin/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
npm
12Criticalhealth index
tgstation/vscode-dm-langclient
VS Code extension for SpacemanDMM's dm-langserver. Report issues on SpacemanDMM.
TypeScript★ 0Jul 31, 2026
GPL-3.0Jul 31, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
theGeoFis/pyBinSim
No repository description published.
Python★ 0Aug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
theofidry/psysh
A REPL for PHP
PHP★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
crates.io · PyPI
13Criticalhealth index
theseus-os/x86_64
Library to program x86_64 hardware.
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Go
10Criticalhealth index
theunrepentantgeek/gojsonschema
An implementation of JSON Schema, draft v4 v6 & v7 - Go language
Go★ 0Aug 19, 2026
Custom licenseAug 19, 2026 · metrics 2.10.0
Go · npm
16Criticalhealth index
threefoldtecharchive/tfexplorer
No repository description published.
Go★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
tienmanhhust/beats
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash
Go★ 0Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
timj/pyvo
An Astropy affiliated package providing access to remote data and services of the Virtual observatory (VO) using Python.
Python★ 0Jul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
Go
28At Riskhealth index
tisonkun/cli
GitHub’s official command line tool
Go★ 0Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
crates.io
24At Riskhealth index
tnull/rust-lightning
Rust-Lightning, not Rusty's Lightning
Rust★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
Go
26At Riskhealth index
toddboom/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
14Criticalhealth index
tokers/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
C★ 0Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
Go
24At Riskhealth index
tomasaschan/kpt-config-sync
ConfigSync - used to sync Git, OCI and Helm charts to your clusters. Part of KPT.
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
tparker-usgs/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
tprk77/lcm
Lightweight Communications and Marshalling
Java · C++ · C★ 0Aug 24, 2026
LGPL-2.1Aug 24, 2026 · metrics 2.10.0
npm
21At Riskhealth index
transmission/rapidjson
A fast JSON parser/generator for C++ with both SAX/DOM style API
C++★ 0Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
trevorrowe/aws-sdk-ruby
The official AWS SDK for Ruby.
Ruby★ 0Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
16Criticalhealth index
trws/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
tsukada-cs/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
crates.io · PyPI
33At Riskhealth index
tulir/synapse
Synapse: Matrix homeserver written in Python/Twisted.
Python★ 0Aug 28, 2026
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
20At Riskhealth index
tv42/rkt
rkt is an App Container runtime for Linux
Go★ 0Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0