Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,771
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,388 recordsRanked by popularity · browse by tag · record statistics
PyPI
19Criticalhealth index
beeware/voc
A transpiler that converts Python code into Java bytecode
Python · Java★ 860Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 2.10.0
18Criticalhealth index
douban/beansdb
Archived, see GoBeansDB instead.
C · Python★ 859Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
rtomayko/shotgun
reloading rack development server / forking version of rackup
Ruby★ 859Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
wolever/parameterized
Parameterized testing with any Python test framework
Python★ 856↓ 19.6M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
toretore/barby
The Ruby barcode generator
Ruby★ 855Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
21At Riskhealth index
jthuraisamy/TelemetrySourcerer
Enumerate and disable common sources of telemetry used by AV/EDR.
C++★ 854Aug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
alteryx/evalml
EvalML is an AutoML library written in python.
Python★ 852↓ 9,780/moAug 24, 2026
BSD-3-ClauseAug 24, 2026 · metrics 2.10.0
Maven
31At Riskhealth index
BluSunrize/ImmersiveEngineering
Wires, transformers, high voltage! Bzzzzt!
Java★ 849Sep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
mrocklin/multipledispatch
Multiple dispatch
Python★ 847↓ 4.9M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
jonhoo/bus
Efficient, lock-free, bounded Rust broadcast channel
Rust★ 846↓ 105.2K/moSep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
doug-martin/nestjs-query
Easy CRUD for GraphQL.
TypeScript★ 842↓ 111.2K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
npm
34At Riskhealth index
epam/ketcher
Web-based molecule sketcher
TypeScript★ 842↓ 10/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
kschiess/parslet
A small PEG based parser library. See the Hacking page in the Wiki as well.
Ruby · HTML★ 841Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
crates.io
13Criticalhealth index
dirs-dev/directories-rs
moved to https://codeberg.org/dirs/directories-rs
Rust★ 840Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
ircmaxell/RandomLib
A library for generating random numbers and strings
PHP★ 840↓ 515.2K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pinterest/pymemcache
A comprehensive, fast, pure-Python memcached client.
Python★ 840↓ 3.3M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
google/gps-measurement-tools
No repository description published.
Java · MATLAB★ 839Aug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
heroku/rails_12factor
No repository description published.
Ruby★ 839Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
jtrupiano/rack-rewrite
A web server agnostic rack middleware for defining and applying rewrite rules. In many cases you can get away with Rack::Rewrite instead of writing Apache mod_rewrite rules.
Ruby★ 836Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
11Criticalhealth index
ikvk/imap_tools
Work with email by IMAP
Python★ 835Aug 6, 2026
Apache-2.0Aug 6, 2026 · metrics 2.10.0
34At Riskhealth index
MyGUI/mygui
Fast, flexible and simple GUI.
C++ · C#★ 834Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
crates.io
50Moderatehealth index
autometrics-dev/autometrics-rs
Easily add metrics to your code that actually help you spot and debug issues in production. Built on Prometheus and OpenTelemetry.
Rust★ 834↓ 381.4K/moAug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0
npm
31At Riskhealth index
xtuc/webassemblyjs
Toolchain for WebAssembly
JavaScript★ 834↓ 752M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
tomasbasham/ratelimit
API Rate Limit Decorator
Python★ 830↓ 12.9M/moAug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
npm
34At Riskhealth index
gemini-testing/testplane
Testplane (ex-hermione) browser test runner based on mocha and wdio
TypeScript · JavaScript★ 828↓ 36.9K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Go
18Criticalhealth index
modern-go/reflect2
reflect api without runtime reflect.Value cost
Go★ 828Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
NaturalHistoryMuseum/pyzbar
Read one-dimensional barcodes and QR codes from Python 2 and 3.
Python★ 827Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
netaddr/netaddr
A network address manipulation library for Python
Python★ 827Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
DevTeam/Pure.DI
Pure DI for .NET
C#★ 823Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Xilinx-CNS/onload
OpenOnload high performance user-level network stack
C★ 823Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0