Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,592
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,323 recordsRanked by popularity · browse by tag · record statistics
RubyGems
14Criticalhealth index
paulRbr/bump-cli
Bump.sh CLI - Deploy your OpenAPI & AsyncAPI documentations from your CI
Ruby★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
22At Riskhealth index
pepepr08/osal
The Core Flight System (cFS) Operating System Abstraction Layer (OSAL)
C★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
21At Riskhealth index
perplexityai/rules_diff
No repository description published.
Starlark · Batchfile★ 0Sep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
peters77/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
20At Riskhealth index
philips/go-bindata
A small utility which generates Go code from any file. Useful for embedding binary data in a Go program.
Go★ 0Aug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
PyPI
11Criticalhealth index
philipwilsonTHG/toy-shell
No repository description published.
Python★ 0Aug 23, 2026
No licenseAug 23, 2026 · metrics 2.10.0
Go
18Criticalhealth index
phineas0fog/assh
:computer: make your ssh client smarter
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Go
18Criticalhealth index
phox/esp32-ai-server-go
No repository description published.
Go★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
phplrt/exception
[READ ONLY] Subtree split of the phplrt exception component (see phplrt/phplrt)
PHP★ 0↓ 3,254/moJul 29, 2026
MITJul 29, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
phplrt/parser-contracts
[READ ONLY] Subtree split of the phplrt parser contracts component (see phplrt/phplrt)
PHP★ 0↓ 2,848/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position
[READ ONLY] Subtree split of the phplrt position component (see phplrt/phplrt)
PHP★ 0↓ 2,183/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position-contracts
[READ ONLY] Subtree split of the phplrt position contracts component (see phplrt/phplrt)
PHP★ 0↓ 2,018/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position-factory-contracts
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 0↓ 2,164/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
14Criticalhealth index
phplrt/source
[READ ONLY] Subtree split of the phplrt source component (see phplrt/phplrt)
Mixed★ 0Jul 24, 2026
No licenseJul 24, 2026 · metrics 2.10.0
14Criticalhealth index
phplrt/source-contracts
[READ ONLY] Subtree split of the phplrt source contracts component (see phplrt/phplrt)
Mixed★ 0Jul 24, 2026
No licenseJul 24, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/source-factory-contracts
[READ ONLY] Subtree split of the phplrt source factory contracts component (see phplrt/phplrt)
PHP★ 0↓ 2,360/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
6Criticalhealth index
pioarduino/mkfatfs
A tools use for pack/unpack flash file system.
C · C++★ 0Sep 5, 2026
No licenseSep 5, 2026 · metrics 2.10.0
18Criticalhealth index
pipermerriam/go-ethereum
Official Go implementation of the Ethereum protocol
Go★ 0Jul 26, 2026
LGPL-3.0Jul 26, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
pitdicker/chrono
Date and time library for Rust
Rust★ 0Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
Maven · Go · npm +2
27At Riskhealth index
pittengermdp/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 0Aug 2, 2026
Apache-2.0Aug 2, 2026 · metrics 2.10.0
crates.io
14Criticalhealth index
pjsier/dicom-rs
Pure Rust implementation of the DICOM standard
Rust★ 0Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
playtestcloud/sdk-core-ruby
Core Library for PayPal Ruby SDKs
Ruby★ 0Aug 2, 2026
Custom licenseAug 2, 2026 · metrics 2.10.0
npm
28At Riskhealth index
plesk/eslint-config
ESLint configuration for Plesk projects
JavaScript★ 0↓ 2,217/moJul 29, 2026
No licenseJul 29, 2026 · metrics 2.10.0
npm
12Criticalhealth index
plurnk/gbnf
A Node-native GBNF utility
TypeScript★ 0↓ 2,324/moJul 15, 2026
MITJul 15, 2026 · metrics 2.10.0
npm
17Criticalhealth index
plurnk/plurnk-agui
No repository description published.
TypeScript★ 0↓ 3,733/moJul 15, 2026
No licenseJul 15, 2026 · metrics 2.10.0
npm
14Criticalhealth index
plurnk/plurnk-execs
Framework + contract for @plurnk/plurnk-execs-* sibling packages (runtime executors for EXEC dispatch).
TypeScript★ 0↓ 9,716/moJul 15, 2026
MITJul 15, 2026 · metrics 2.10.0
npm
14Criticalhealth index
plurnk/plurnk-execs-common
Common-REPL detection harness for plurnk-service's exec scheme — one package exposing whichever common interpreters (perl/ruby/php/lua/awk/bc/…) exist on the host.
TypeScript★ 0↓ 5,599/moJul 15, 2026
MITJul 15, 2026 · metrics 2.10.0