Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,788
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,256 recordsRanked by popularity · browse by tag · record statistics
PyPI
48Weakhealth index
ml6team/fondant
Production-ready data processing made easy and shareable
Python★ 359↓ 485/moAug 16, 2026
Apache-2.0Aug 16, 2026 · metrics 2.10.0
npm
20At Riskhealth index
pkrumins/node-tree-kill
kill trees of processes
JavaScript★ 359↓ 182M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
41Weakhealth index
servo/rust-fnv
Fowler–Noll–Vo hash function
Rust★ 358↓ 49.4M/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
trezor/trezor-core
:lock: Don't use this repo, use the new monorepo instead:
Python · C★ 358Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
datacenter/acitoolkit
A basic toolkit for accessing the Cisco APIC
Python★ 357Jul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
Go
26At Riskhealth index
kylelemons/godebug
Debugging helper utilities for Go
Go★ 357Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
rustwasm/console_error_panic_hook
A panic hook for wasm32-unknown-unknown that logs panics with console.error
Rust★ 356↓ 4.5M/moAug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
NuGet
14Criticalhealth index
ctaggart/SourceLink
Source Code On Demand
C#★ 355Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
19Criticalhealth index
googleapis/python-speech
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-speech
Mixed★ 355Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.10.0
Go
17Criticalhealth index
mitchellh/copystructure
Go (golang) library for deep copying values in Go.
Go★ 355Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
25At Riskhealth index
jonschlinkert/kind-of
Get the native JavaScript type of a value, fast. Used by superstruct, micromatch and many others!
JavaScript★ 354↓ 477M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
18Criticalhealth index
hunterhacker/jdom
Java manipulation of XML made easy
Java★ 353Jul 30, 2026
Custom licenseJul 30, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nficano/humps
Convert strings and dict keys between snake_case, camelCase, PascalCase, and kebab-case in Python.
Python★ 353↓ 6.4M/moAug 27, 2026
UnlicenseAug 27, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
adhocore/php-cli
PHP Console Application made easy- build great console apps with ease. Comes with Zero Dependency and Autocompletion support. Think of it as extremely flexible and customizable PHP cli application framework.
PHP★ 352↓ 87.4K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist · npm
43Weakhealth index
Hasnayeen/themes
Themes for Filament panels.
PHP · Blade★ 351↓ 7,945/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
15Criticalhealth index
intenthq/anon
A UNIX Command To Anonymise Data
Go★ 351Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
14Criticalhealth index
redromnon/HeroicBashLauncher
Directly launch any Epic Games Store and GOG game from anywhere without Heroic on Linux.
Python★ 351Jul 24, 2026
GPL-3.0Jul 24, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
xwmx/pandoc-ruby
Ruby wrapper for Pandoc
Ruby★ 351Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
21At Riskhealth index
feross/safe-buffer
Safer Node.js Buffer API
JavaScript★ 347↓ 1.1B/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
14Criticalhealth index
pvande/differ
A simple gem for generating string diffs
Ruby★ 347Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
requests/requests-ntlm
NTLM authentication support for Requests.
Python★ 347Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
SimpleBus/message-bus
[READ ONLY] Generic classes and interfaces for messages and message buses. Full documentation can be found here:
PHP★ 346↓ 44K/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Maven
16Criticalhealth index
duolingo/rtl-viewpager
ViewPager with RTL support :arrows_counterclockwise:
Java★ 345Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
nishanths/exhaustive
Check exhaustiveness of switch statements of enum-like constants in Go source code.
Go★ 344Aug 4, 2026
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
salaniz/pycocoevalcap
Python 3 support for the MS COCO caption evaluation tools
Python★ 344↓ 622.1K/moAug 29, 2026
Custom licenseAug 29, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Azure/azure-storage-python
Microsoft Azure Storage Library for Python
Python★ 343↓ 14M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
rtfd/recommonmark
A markdown parser for docutils
Python★ 343↓ 1M/moJul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
30At Riskhealth index
d3/d3-drag
Drag and drop SVG, HTML or Canvas using mouse or touch input.
JavaScript★ 342↓ 102M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
crates.io · npm
21At Riskhealth index
b-inary/desktop-postflop
[Development suspended] Advanced open-source Texas Hold'em GTO solver with optimized performance
Vue · TypeScript★ 341Aug 1, 2026
AGPL-3.0Aug 1, 2026 · metrics 2.10.0