Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,928
Monthly downloads under inspection
651B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,990 recordsRanked by popularity · browse by tag · record statistics
RubyGems
20At Riskhealth index
rtomayko/shotgun
reloading rack development server / forking version of rackup
Ruby★ 860Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
—
27At Riskhealth index
msgpack/msgpack-cli
MessagePack implementation for Common Language Infrastructure / msgpack.org[C#]
C#★ 859Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
19Criticalhealth index
42atomys/stud42
Stud42 official repository since major 3 update (https://s42.app)
TypeScript · HCL · Go★ 858Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
—
16Criticalhealth index
douban/beansdb
Archived, see GoBeansDB instead.
C · Python★ 858Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
beeware/voc
A transpiler that converts Python code into Java bytecode
Python · Java★ 857Sep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
34At Riskhealth index
google/generative-ai-go
Go SDK for Google Generative AI
Go★ 857Sep 25, 2026
Apache-2.0Sep 25, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
wolever/parameterized
Parameterized testing with any Python test framework
Python★ 857↓ 13M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
toretore/barby
The Ruby barcode generator
Ruby★ 855Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
13Criticalhealth index
smi2/phpClickHouse
php ClickHouse wrapper
PHP★ 854↓ 620.4K/moSep 24, 2026
MITSep 24, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
comfy/active_link_to
Rails view helper to manage "active" state of a link
Ruby★ 853Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Maven
30At Riskhealth index
BluSunrize/ImmersiveEngineering
Wires, transformers, high voltage! Bzzzzt!
Java★ 852Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
alteryx/evalml
EvalML is an AutoML library written in python.
Python★ 851↓ 3,659/moOct 23, 2026
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
yukinarit/pyserde
Yet another serialization library on top of dataclasses, inspired by serde-rs.
Python★ 851↓ 939.9K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
ConradIrwin/pry-rescue
Start a pry session whenever something goes wrong.
Ruby★ 849Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
mrocklin/multipledispatch
Multiple dispatch
Python★ 849↓ 4M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
jonhoo/bus
Efficient, lock-free, bounded Rust broadcast channel
Rust★ 847↓ 129.7K/moOct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
DevTeam/Pure.DI
Pure DI for .NET
C#★ 844Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
11Criticalhealth index
ikvk/imap_tools
Work with email by IMAP
Python★ 844↓ 680.8K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
60Moderatehealth index
petersalomonsen/wasm-git
GIT for nodejs and the browser using https://libgit2.org compiled to WebAssembly with https://emscripten.org
JavaScript · C★ 843↓ 3,679/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
—
34At Riskhealth index
MyGUI/mygui
Fast, flexible and simple GUI.
C++ · C#★ 842Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
doug-martin/nestjs-query
Easy CRUD for GraphQL.
TypeScript★ 842↓ 125.5K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/update-db
CLI tool to update caniuse-lite to refresh target browsers from Browserslist config
JavaScript★ 841↓ 665M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Xilinx-CNS/onload
OpenOnload high performance user-level network stack
C★ 840Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
kschiess/parslet
A small PEG based parser library. See the Hacking page in the Wiki as well.
Ruby · HTML★ 840Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
ircmaxell/RandomLib
A library for generating random numbers and strings
PHP★ 839↓ 575.9K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
RubyGems
15Criticalhealth index
heroku/rails_12factor
No repository description published.
Ruby★ 838Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
dirs-dev/directories-rs
moved to https://codeberg.org/dirs/directories-rs
Rust★ 837Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
jtrupiano/rack-rewrite
A web server agnostic rack middleware for defining and applying rewrite rules. In many cases you can get away with Rack::Rewrite instead of writing Apache mod_rewrite rules.
Ruby★ 836Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
xtuc/webassemblyjs
Toolchain for WebAssembly
JavaScript★ 834↓ 703M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
autometrics-dev/autometrics-rs
Easily add metrics to your code that actually help you spot and debug issues in production. Built on Prometheus and OpenTelemetry.
Rust★ 833↓ 353.5K/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0