Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,759
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,396 recordsRanked by popularity · browse by tag · record statistics
PyPI
32At Riskhealth index
wemake-services/flake8-eradicate
Flake8 plugin to find commented out or dead code
Python★ 315↓ 716.6K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
trautonen/coveralls-maven-plugin
Maven plugin for submitting Java code coverage reports to Coveralls web service.
Java★ 314Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
KotatsuApp/kotatsu-parsers
Manga parsers library for Kotlin/JVM and Android
Kotlin★ 313Jul 31, 2026
GPL-3.0Jul 31, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
rapidsai/cuxfilter
GPU accelerated cross filtering with cuDF.
Python · Jupyter Notebook★ 313Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
bellockk/alphashape
Toolbox for constructing alpha shapes.
Python★ 312Aug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
flavorjones/chromedriver-helper
Deprecated in favor of the `webdrivers` gem.
HTML · Ruby★ 312Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
polaris-gslb/polaris-gslb
A free, open source GSLB (Global Server Load Balancing) solution.
Python★ 312Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
trezor/trezor-mcu
:lock: Don't use this repo, use the new monorepo instead:
C★ 312Jul 23, 2026
LGPL-3.0Jul 23, 2026 · metrics 2.10.0
Go
37Weakhealth index
hexops/valast
Convert Go values to their AST
Go★ 311Jul 30, 2026
Custom licenseJul 30, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
Martiusweb/asynctest
Enhance the standard unittest package with features for testing asyncio libraries
Python★ 310↓ 9.6M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
16Criticalhealth index
alanclarke/urlite
A very small, fast, dependency free url parser and formatter for nodejs and the web
JavaScript★ 310Aug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0
npm
21At Riskhealth index
domenic/opener
Opens stuff, like webpages and files and executables, cross-platform
JavaScript★ 310↓ 78.9M/moAug 31, 2026
Custom licenseAug 31, 2026 · metrics 2.10.0
Go
53Moderatehealth index
nix-community/gomod2nix
Convert applications using Go modules to Nix expressions [maintainer=@marcusramberg]
Nix · Go★ 310Sep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
ValentinBELYN/icmplib
Easily forge ICMP packets and make your own ping and traceroute.
Python★ 309↓ 1.2M/moAug 24, 2026
LGPL-3.0Aug 24, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
miyakogi/m2r
Markdown to reStructuredText converter
Python★ 309Aug 19, 2026
MITAug 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
mysticatea/abort-controller
An implementation of WHATWG AbortController interface.
TypeScript · JavaScript★ 309↓ 257M/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
ncuesta/dropzonejs-rails
Spice your Rails apps with some Dropzone sugar!
JavaScript★ 309Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
nullivex/lib-array2xml
Array2XML conversion library credit to lalit.org
PHP★ 309↓ 362.6K/moAug 3, 2026
GPL-3.0Aug 3, 2026 · metrics 2.10.0
32At Riskhealth index
raphaelmor/Polyline
Polyline encoder / decoder in swift
Swift · Ruby★ 309Aug 15, 2026
MITAug 15, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
pola-rs/pyo3-polars
Plugins/extension for Polars
Rust · Python★ 308↓ 147.7K/moAug 6, 2026
MITAug 6, 2026 · metrics 2.10.0
npm
29At Riskhealth index
Icon-Shelf/icon-shelf
SVG icon manager for developers.
TypeScript★ 307Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
coingecko/cryptoexchange
[UNMAINTAINED] Ruby library to query market data from cryptocurrency exchanges (https://www.coingecko.com)
Ruby★ 307Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
webpack/loader-runner
Runs (webpack) loaders
JavaScript★ 307↓ 184M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
13Criticalhealth index
Raynos/xtend
extend like a boss
JavaScript★ 306↓ 324M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
23At Riskhealth index
go-playground/locales
:earth_americas: a set of locales generated from the CLDR Project which can be used independently or within an i18n package; these were built for use with, but not exclusive to https://github.com/go-playground/universal-translator
Go★ 306Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
hddm-devs/hddm
HDDM is a python module that implements Hierarchical Bayesian parameter estimation of Drift Diffusion Models (via PyMC).
Jupyter Notebook★ 306↓ 465/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
requests/requests-kerberos
An authentication handler for using Kerberos with Python Requests.
Python★ 306↓ 4.6M/moAug 19, 2026
Custom licenseAug 19, 2026 · metrics 2.10.0
RubyGems
43Weakhealth index
socketry/multipart-post
Adds multipart POST capability to net/http
Ruby★ 306Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0