Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,705
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,621 recordsRanked by popularity · browse by tag · record statistics
PyPI
24Criticalhealth index
alexmojaki/stack_data
No repository description published.
Python★ 51Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
46At riskhealth index
asottile/flake8-typing-imports
flake8 plugin which checks that typing imports are properly guarded
Python★ 51↓ 101.4K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
coreydoughty/Fpdf
A composer wrapper around the great php FPDF class. All credit to them.
PHP · HTML★ 51↓ 107K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
34At riskhealth index
shakacode/control-plane-flow
The power of Kubernetes with the ease of Heroku! Simple CI configuration for Heroku-style "review apps," staging deployments, and promoting staging to production, following the "convention over configuration" philosophy.
Ruby★ 51Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
32At riskhealth index
typst/codex
A human-friendly notation for Unicode symbols.
Rust★ 51↓ 243.1K/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
28Criticalhealth index
deanc/esbuild-plugin-postcss
Plugin for esbuild to support SASS styles
JavaScript · TypeScript★ 50↓ 14.9K/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
PyPI
14Criticalhealth index
codecobblers/dirtyjson
Python JSON parser for reading JSON objects out of JS files
Python★ 49Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
dstackai/gpuhunt
GPU prices aggregator for cloud providers
Python★ 49Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
Go
35At riskhealth index
essentialkaos/ek
Auxiliary packages for Go
Go★ 49Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
18Criticalhealth index
ferd/cth_readable
Common Test hooks for more readable logs
Erlang★ 49Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/friendly-exception
An interface for an exception to be friendly
PHP★ 49↓ 74.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/strings
String helper methods and an inflector
PHP★ 49↓ 95.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/yii2-symfonymailer
Yii 2 Symfony mailer extension.
PHP★ 49↓ 158.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
JBZoo/Mermaid-PHP
Generate diagrams and flowcharts with the help of the mermaid script language
PHP★ 48↓ 29.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
15Criticalhealth index
jonschlinkert/is-windows
Returns true if the platform is Windows (and Cygwin or MSYS/MinGW for unit tests)
JavaScript★ 48↓ 143M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
43At riskhealth index
savonrb/akami
Building Web Service Security
Ruby★ 48Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
14Criticalhealth index
clap-rs/term_size-rs
Functions for determining terminal sizes in Rust
Rust★ 47Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
26Criticalhealth index
processone/cache_tab
In-memory cache Erlang / Elixir library
Erlang★ 47Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/form
The package helps with implementing data entry forms
PHP★ 47↓ 6,484/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
mime-types/mime-types-data
MIME Type registry data
Ruby★ 46Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
salute-developers/plasma
Salute Design System
TypeScript · MDX★ 46Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
18Criticalhealth index
sanmiguel/websocket_client
Erlang websocket client (ws and wss supported)
Erlang★ 46Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/cache
PSR-16 compatible cache library
PHP★ 46↓ 30.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
yiisoft/data
Generic data abstractions: reading, writing, processing.
PHP★ 46↓ 13.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
NuGet
18Criticalhealth index
cyotek/Cyotek.Drawing.BitmapFont
Component for parsing bitmap font files generated by AngelCode's BMFont utility
C#★ 45Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist · npm
34At riskhealth index
m-a-k-o/nova-custom-table-card
Simple Nova Card for Custom Tables
PHP · Vue★ 45↓ 7,214/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
ruby/forwardable
Provides delegation of specified methods to a designated object
Ruby★ 45Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
26Criticalhealth index
huxi/rusty_ulid
Rust ULID (Universally Unique Lexicographically Sortable Identifier) generation and processing
Rust★ 43↓ 9,604/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
15Criticalhealth index
sindresorhus/path-is-absolute
Node.js 0.12 path.isAbsolute() ponyfill
JavaScript★ 43↓ 340M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0