Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,685
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,371 recordsRanked by popularity · browse by tag · record statistics
RubyGems
34At Riskhealth index
Netflix/fast_jsonapi
No Longer Maintained - A lightning fast JSON:API serializer for Ruby Objects.
Ruby★ 5,032Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · RubyGems
64Moderatehealth index
google/pytype
A static type analyzer for Python code
Python★ 5,029↓ 924.9K/moAug 8, 2026
Custom licenseAug 8, 2026 · metrics 2.10.0
Packagist
45Weakhealth index
PHP-FFMpeg/PHP-FFMpeg
An object oriented PHP driver for FFMpeg binary
PHP★ 5,017↓ 815.5K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Instagram/MonkeyType
A Python library that generates static type annotations by collecting runtime types
Python★ 5,000Aug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
googlemaps/google-maps-services-python
Python client library for Google Maps API Web Services
Python★ 4,968↓ 3.1M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
Kinnara/ModernWpf
Modern styles and controls for your WPF applications
C#★ 4,959Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
26At Riskhealth index
MediaBrowser/Emby
Emby Server is a personal media server with apps on just about every device.
C#★ 4,950Aug 11, 2026
GPL-2.0Aug 11, 2026 · metrics 2.10.0
Go
11Criticalhealth index
mailru/easyjson
Fast JSON serializer for golang.
Go★ 4,916Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
Codeception/Codeception
Full-stack testing PHP framework
PHP★ 4,861↓ 1.4M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
backup/backup
Easy full stack backup operations on UNIX-like systems.
Ruby★ 4,858Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
geopy/geopy
Geocoding library for Python.
Python★ 4,856↓ 13.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
uber-go/automaxprocs
Automatically set GOMAXPROCS to match Linux container CPU quota.
Go★ 4,847Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
jenssegers/agent
👮 A PHP desktop/mobile user agent parser with support for Laravel, based on Mobiledetect
PHP★ 4,842↓ 1.5M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lk-geimfari/mimesis
Mimesis is a Python library for generating fake but realistic data in multiple languages and locales.
Python★ 4,839↓ 2.6M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii
Yii PHP Framework 1.1.x
PHP★ 4,823↓ 94.4K/moAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
NuGet
29At Riskhealth index
commandlineparser/commandline
The best C# command line parser that brings standardized *nix getopt style, for .NET. Includes F# support
C#★ 4,816Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
45Weakhealth index
dustin/go-humanize
Go Humans! (formatters for units to human friendly sizes)
Go★ 4,811Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
Studio-42/elFinder
📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
JavaScript · PHP★ 4,799↓ 188.8K/moAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
orchidsoftware/platform
Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards.
PHP★ 4,793↓ 25K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
ronmamo/reflections
Java runtime metadata analysis
Java★ 4,764Aug 28, 2026
WTFPLAug 28, 2026 · metrics 2.10.0
14Criticalhealth index
ronggang/transmission-web-control
一个 Transmission 浏览器管理界面。Transmission Web Control is a custom web UI. (该项目不再维护。)
CSS · JavaScript · HTML★ 4,740Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
34At Riskhealth index
Masterminds/sprig
Useful template functions for Go templates.
Go★ 4,737Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
symfony/polyfill-php72
Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
Mixed★ 4,728↓ 4.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
jsonresume/resume-cli
MOVED to jsonresume/jsonresume.org (packages/cli) — npm 'resume-cli' unchanged, revived for Node 18+
JavaScript★ 4,719↓ 2,149/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go · RubyGems
34At Riskhealth index
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Go★ 4,718Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go
28At Riskhealth index
jinzhu/now
Now is a time toolkit for golang
Go★ 4,700Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm · Hex
34At Riskhealth index
blockscout/blockscout
Blockchain explorer for Ethereum based network and a tool for inspecting and analyzing EVM based blockchains.
Elixir★ 4,666Sep 3, 2026
Custom licenseSep 3, 2026 · metrics 2.10.0
37Weakhealth index
stackblitz/webcontainer-core
Dev environments. In your web app.
Mixed★ 4,630Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0