Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,728
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,411 recordsRanked by popularity · browse by tag · record statistics
19Criticalhealth index
googleapis/python-dialogflow
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-dialogflow
Mixed★ 396Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.10.0
Go
41Weakhealth index
niklasfasching/go-org
Org mode parser with html & pretty printed org rendering. also shitty static site generator.
Go★ 396Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
yargs/cliui
easily create complex multi-column command-line-interfaces.
JavaScript · TypeScript★ 396↓ 897M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
Michael-F-Bryan/include_dir
The logical evolution of the include_str macro for embedding a directory tree into your binary.
Rust★ 395↓ 9.3M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
29At Riskhealth index
evanderkoogh/otel-cf-workers
An OpenTelemetry compatible library for instrumenting and exporting traces for Cloudflare Workers
TypeScript★ 395↓ 543.2K/moAug 5, 2026
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
19Criticalhealth index
microsoft/RTVS
R Tools for Visual Studio.
C#★ 394Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
18Criticalhealth index
microsoft/setup-msbuild
A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications.
TypeScript★ 394Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
php-fig/http-message-util
No repository description published.
PHP★ 394↓ 3.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
42Weakhealth index
HumanSecurity/marshmallow
Marshmallow provides a flexible and performant JSON unmarshalling in Go. It specializes in dealing with unstructured struct - when some fields are known and some aren't, with zero performance overhead nor extra coding needed.
Go★ 391Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Lightning-Universe/stable-diffusion-deploy
Learn to serve Stable Diffusion models on cloud infrastructure at scale. This Lightning App shows load-balancing, orchestrating, pre-provisioning, dynamic batching, GPU-inference, micro-services working together via the Lightning Apps framework.
Python · TypeScript★ 391Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
hMatoba/Piexif
Exif manipulation with pure python script.
Python★ 391↓ 2.9M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
kyamagu/faiss-wheels
Community-maintained faiss wheel builder
CMake · Shell★ 390Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
19Criticalhealth index
JuliaGPU/CUDAnative.jl
Julia support for native CUDA programming
Julia★ 389Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
23At Riskhealth index
walling/unorm
JavaScript Unicode 8.0 Normalization - NFC, NFD, NFKC, NFKD.
JavaScript · Java · HTML★ 387↓ 8.5M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
bonsairobo/building-blocks
A voxel library for real-time applications.
Rust★ 385↓ 170/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
jorgecarleitao/parquet2
Fastest and safest Rust implementation of parquet. `unsafe` free. Integration-tested against pyarrow
Rust★ 385↓ 246.5K/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
55Moderatehealth index
jshttp/negotiator
An HTTP content negotiator for Node.js
JavaScript★ 384↓ 782M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
ipaddress-gem/ipaddress
A library to handle IPv4 and IPv6 addresses in a modern and productive way.
Ruby★ 382Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
neithere/argh
An argparse wrapper that doesn't make you say "argh" each time you deal with it.
Python★ 382↓ 2.4M/moAug 19, 2026
LGPL-3.0Aug 19, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
symplify/coding-standard
[Deprecated] Use ECS that includes this set with more new rules
PHP★ 381↓ 81.3K/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
ClueLang/Clue
C/Rust like programming language that compiles into Lua code
Rust★ 380↓ 88/moAug 14, 2026
MITAug 14, 2026 · metrics 2.10.0
npm
32At Riskhealth index
mathiasbynens/regenerate
Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.
JavaScript★ 378↓ 162M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
32At Riskhealth index
bytedance/syllepsis
Syllepsis is an out-of-the-box rich text editor.
TypeScript★ 377↓ 1,400/moAug 3, 2026
Custom licenseAug 3, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
chef-boneyard/chef-dk
DEPRECATED: A streamlined development and deployment workflow for Chef Infra platform.
Ruby★ 377Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
19Criticalhealth index
rabbitmq/rabbitmq-management
RabbitMQ Management UI and HTTP API
Erlang · JavaScript · HTML★ 373Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
threedaymonk/htmlbeautifier
A normaliser/beautifier for HTML that also understands embedded Ruby. Ideal for tidying up Rails templates.
Ruby★ 373Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
breamware/sidekiq-batch
Sidekiq Batch Jobs Implementation
Ruby★ 370Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
22At Riskhealth index
creationix/jsonparse
A streaming JSON parser written in pure JavaScript for node.js
JavaScript★ 370↓ 84.7M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
NuGet
18Criticalhealth index
DarkWanderer/ClickHouse.Client
Unofficial .NET client for ClickHouse database
C#★ 367Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0