Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,912
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,275 recordsRanked by popularity · browse by tag · record statistics
Go
30At riskhealth index
kerlenton/mcpsnoop
Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.
Go★ 276Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
26Criticalhealth index
defunkt/colored
Colors in your terminal. Unmaintained.
Ruby★ 274Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
23Criticalhealth index
inyutin/aiohttp_retry
Simple retry client for aiohttp.
Python★ 273Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
orchestral/testbench-core
The Testing Framework for Laravel Development
PHP · Blade★ 272↓ 1.5M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
amphp/socket
Non-blocking socket and TLS functionality for PHP based on Amp.
PHP★ 267↓ 2.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
didww/credit_card_validations
:credit_card: ruby gem for validating credit cards, generating credit card numbers, Luhn checks
Ruby★ 266Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
41At riskhealth index
jshttp/accepts
Higher-level content negotiation
JavaScript★ 266↓ 493M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
14Criticalhealth index
mbk-dev/okama
Investment portfolio and stocks analyzing tools for Python with free historical data
Python★ 266Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
10Criticalhealth index
VahidN/DNTCaptcha.Core
DNTCaptcha.Core is a captcha generator and validator for ASP.NET Core applications
SCSS · HTML · JavaScript★ 265Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
openpmix/openpmix
OpenPMIx Project Repository
C★ 264Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
lyz-code/yamlfix
A simple opinionated yaml formatter that keeps your comments!
Python★ 263Jul 21, 2026
GPL-3.0Jul 21, 2026 · metrics 1.13.0
RubyGems · npm
34At riskhealth index
ruby-grape/grape-swagger-rails
Swagger UI as Rails Engine for grape-swagger gem.
Ruby · JavaScript · TypeScript★ 260Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
29Criticalhealth index
gazorby/fifc
🐠 Configurable fzf completions for fish shell
Shell★ 258Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
29Criticalhealth index
ajv-validator/ajv-keywords
Additional JSON-Schema keywords for Ajv JSON validator
TypeScript★ 257Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
26Criticalhealth index
anjo76/angelscript
The AngelCode Scripting Library, or AngelScript as it is also known, is an extremely flexible cross-platform scripting library designed to allow applications to extend their functionality through external scripts. It has been designed from the beginning to be an easy to use component, both for the application programmer and the script writer.
C++★ 257Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist · npm
22Criticalhealth index
felixfbecker/php-advanced-json-rpc
A more advanced PHP implementation of the JSONRPC Protocol 📞❗
PHP★ 255↓ 795.2K/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
26Criticalhealth index
processone/stun
STUN and TURN library for Erlang / Elixir
Erlang★ 255Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
rstcheck/rstcheck
Checks syntax of reStructuredText and code blocks nested within it
Python★ 255Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist · npm
13Criticalhealth index
csarrazi/CsaGuzzleBundle
A bundle integrating Guzzle >=4.0 in Symfony
PHP · Twig★ 250↓ 42K/moJul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
RubyGems
25Criticalhealth index
michaelherold/benchmark-memory
Memory profiling benchmark style, for Ruby 2.1+
Ruby★ 250Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
micromatch/braces
Faster brace expansion for node.js. Besides being faster, braces is not subject to DoS attacks like minimatch, is more accurate, and has more complete support for Bash 4.3.
JavaScript★ 249↓ 664M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
18Criticalhealth index
choptastic/qdate
Erlang date, time, and timezone management: formatting, conversion, and date arithmetic
Erlang★ 248Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
28Criticalhealth index
joomcode/redispipe
High-throughput Redis client for Go with implicit pipelining
Go★ 248Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
michaelfaith/eslint-plugin-package-json
Rules for consistent, readable, and valid package.json files. 🗂️
TypeScript · MDX★ 248↓ 983.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
plaid/plaid-ruby
Ruby bindings for Plaid
Ruby★ 247Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
chuckremes/ffi-rzmq
FFI bindings for ZeroMQ so the library can be used under JRuby and other FFI-compliant ruby runtimes
Ruby★ 245Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
sindresorhus/decamelize
Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow
JavaScript★ 244↓ 250M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
9Criticalhealth index
romis2012/aiohttp-socks
Proxy (HTTP, SOCKS) connector for aiohttp
Python★ 242Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0