Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,591
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,316 recordsRanked by popularity · browse by tag · record statistics
PyPI
26Criticalhealth index
lidatong/dataclasses-json
Easily serialize Data Classes to and from JSON
Python★ 1,485Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
33At riskhealth index
emcconville/wand
The ctypes-based simple ImageMagick binding for Python
Python★ 1,481↓ 1.4M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
slevomat/coding-standard
Slevomat Coding Standard for PHP_CodeSniffer provides many useful sniffs
PHP★ 1,479↓ 3.5M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · Maven
30At riskhealth index
sartoopjj/thefeed
DNS-based feed reader and lite messenger for environments where only DNS queries work. Read Telegram channels and public X accounts, and exchange end-to-end-encrypted messages with other users — all over DNS.
Go · JavaScript★ 1,456Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
30At riskhealth index
gleam-wisp/wisp
🧚 A practical web framework for Gleam
Gleam★ 1,452Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
microlinkhq/unavatar
Get unified user avatar from social networks, including Instagram, SoundCloud, Telegram, Twitter, YouTube & more.
HTML★ 1,448Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
composer/installers
A Multi-Framework Composer Library Installer
PHP★ 1,440↓ 2.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
24Criticalhealth index
serilog/serilog-aspnetcore
Serilog integration for ASP.NET Core
C#★ 1,427Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
atipugin/telegram-bot-ruby
Ruby wrapper for Telegram's Bot API
Ruby★ 1,425Jul 23, 2026
WTFPLJul 23, 2026 · metrics 1.13.0
32At riskhealth index
benoitc/hackney
simple HTTP client in Erlang
Erlang★ 1,415Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
PeculiarVentures/PKI.js
PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.
TypeScript★ 1,391↓ 25.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
38At riskhealth index
JetBrains/phpstorm-stubs
PHP runtime & extensions header files for PhpStorm
PHP★ 1,390↓ 1.9M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist · npm
36At riskhealth index
amnuts/opcache-gui
A clean, effective and responsive interface for Zend OPcache
PHP · JavaScript★ 1,362↓ 80.4K/moJul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
38At riskhealth index
bitfoundation/bitplatform
Build all of your apps using what you already know and love ❤️
C# · HTML★ 1,359Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
32At riskhealth index
kubenetworks/kubevpn
KubeVPN offers a Cloud Native Dev Environment that connects to kubernetes cluster network.
Go★ 1,355Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
36At riskhealth index
subsquid/squid-sdk
TypeScript ETL toolkit for indexing Ethereum, Solana, and Substrate data, sourced from SQD Network.
TypeScript★ 1,334Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
PyPI
39At riskhealth index
pypa/pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Python★ 1,333↓ 24.2M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
33At riskhealth index
sourcey/sourcey
Precision documentation from OpenAPI, MCP, Doxygen, and Markdown guides. Static HTML you own.
TypeScript★ 1,332↓ 4,079/moJul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
php-http/discovery
Finds installed clients and message factories
PHP★ 1,324↓ 8.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · Maven
38At riskhealth index
software-mansion/react-native-enriched-html
HTML-based Rich Text solution for React Native
C · TypeScript · Objective-C++★ 1,322↓ 116.4K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
php-http/message
HTTP Message related tools
PHP★ 1,318↓ 4.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
40At riskhealth index
deckhouse/deckhouse
Kubernetes platform from Flant
Go★ 1,317Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
40At riskhealth index
pahaz/sshtunnel
SSH tunnels to remote server.
Python★ 1,294↓ 26.9M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
34At riskhealth index
micromatch/picomatch
Blazing fast and accurate glob matcher written JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions. Used by GraphQL, Jest, Astro, Snowpack, Storybook, bulma, Serverless, fdir, Netlify, AWS Amplify, Revogrid, rollup, routify, open-wc, imba, ava, docusaurus, fast-glob, globby, chokidar, anymatch, cloudflare/miniflare, pts, and more than 5 million projects! Please follow picomatch's author: https://github.com/jonschlinkert
JavaScript★ 1,280↓ 1.7B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
oasdiff/oasdiff
OpenAPI Diff and Breaking Changes
Go★ 1,279Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Nyholm/psr7
A super lightweight PSR-7 implementation
PHP★ 1,276↓ 8.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
Anorov/PySocks
A SOCKS proxy client and wrapper for Python.
Python★ 1,274Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
laradumps/laradumps
🛻 LaraDumps is a friendly app designed to boost your Laravel PHP coding and debugging experience.
PHP★ 1,266↓ 108K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
spatialaudio/python-sounddevice
:sound: Play and Record Sound with Python :snake:
Python★ 1,259Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
33At riskhealth index
gosnmp/gosnmp
An SNMP library written in Go
Go★ 1,251Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0