Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
40,995
Monthly downloads under inspection
383B
Median health index
57 Moderate
16,015 recordsRanked by popularity · browse by tag · record statistics
NuGet
56Moderatehealth index
tonerdo/dotnet-env
A .NET library to load environment variables from .env files
C#★ 556Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
68Moderatehealth index
AlirezaHadjar/react-native-fast-confetti
🏎️ The fastest confetti animation library in react native
TypeScript★ 555↓ 165.3K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
63Moderatehealth index
dahlia/upyo
Upyo is a simple and cross-runtime library for sending email messages using SMTP and various email providers. It works on Node.js, Deno, Bun, and edge functions.
TypeScript★ 555Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
77Goodhealth index
jaseci-labs/jac
The Jac Programming Language -- the only language you need to build anything (full stack app, device driver, video game, website, whatever). One self-contained binary; One language; Codegens to Python bytecode, JavaScript, and native machine code.
Jac★ 555Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
77Goodhealth index
miurahr/py7zr
7zip in python3 with ZStandard, PPMd, LZMA2, LZMA1, Delta, BCJ, BZip2, and Deflate compressions, and AES encryption.
Python★ 555Jul 21, 2026
LGPL-2.1Jul 21, 2026 · metrics 1.13.0
PyPI · crates.io
71Goodhealth index
genomoncology/biomcp
BioMCP: Biomedical Model Context Protocol
Rust · Python★ 554Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
55Moderatehealth index
jsocol/pystatsd
A Python client for statsd
Python★ 553Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
RubyGems · npm
45At riskhealth index
kirillplatonov/hotwire-livereload
Live reload gem for Hotwire Rails apps.
JavaScript · Ruby★ 553Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-diactoros
PSR HTTP Message implementations
PHP★ 553↓ 3.3M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
56Moderatehealth index
sindresorhus/ansi-escapes
ANSI escape codes for manipulating the terminal
JavaScript · TypeScript★ 553↓ 468M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
69Moderatehealth index
tidesdb/tidesdb
High-performance adaptive, durable, portable, transactional embeddable storage engine with optional tiered object storage for infinite scale. Designed for flash and RAM optimization.
C★ 553Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
64Moderatehealth index
PromPHP/prometheus_client_php
Prometheus instrumentation library for PHP applications
PHP★ 551↓ 1.1M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
68Moderatehealth index
probot/smee-client
🔴 Receives payloads then sends them to your local server
TypeScript★ 551↓ 590.9K/moJul 26, 2026
ISCJul 26, 2026 · metrics 1.13.0
Packagist
55Moderatehealth index
bepsvpt/secure-headers
PHP Secure Headers
PHP★ 550↓ 155.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
61Moderatehealth index
humanwhocodes/humanfs
A modern filesystem API for JavaScript
JavaScript★ 550↓ 988M/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
RubyGems
58Moderatehealth index
jnunemaker/crack
Really simple JSON and XML parsing, ripped from Merb and Rails.
Ruby★ 550Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
80Goodhealth index
microsoft/semantic-link-labs
Early access to new features for Microsoft Fabric's Semantic Link.
Python★ 549↓ 2.1M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
68Moderatehealth index
zbateson/mail-mime-parser
An email parser written in PHP
PHP★ 549↓ 1.4M/moJul 24, 2026
BSD-2-ClauseJul 24, 2026 · metrics 1.13.0
crates.io · PyPI
71Goodhealth index
NVIDIA/NVTX
The NVIDIA® Tools Extension SDK (NVTX) is a C-based Application Programming Interface (API) for annotating events, code ranges, and resources in your applications.
C++ · C · Rust★ 547↓ 1/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
—
67Moderatehealth index
kubedb/docs
KubeDB Docs
Shell★ 547Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
51Moderatehealth index
rse/stmux
Simple Terminal Multiplexer for Node.js Environments
TypeScript · JavaScript★ 547↓ 105.8K/moJul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
RubyGems
56Moderatehealth index
toland/patron
Ruby HTTP client based on libcurl
C · Ruby★ 547Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
69Moderatehealth index
k1LoW/git-wt
A Git subcommand that makes `git worktree` simple
Go★ 546Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
74Goodhealth index
wevm/abitype
Strict TypeScript types for Ethereum ABIs
TypeScript★ 546↓ 22.5M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist · PyPI
62Moderatehealth index
FriendsOfCake/cakephp-upload
CakePHP: Handle file uploading sans ridiculous automagic
PHP★ 545↓ 32.1K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · npm
60Moderatehealth index
creagia/laravel-sign-pad
A Laravel package to sign documents and optionally generate certified PDFs associated with Eloquent models.
PHP★ 545↓ 10.2K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
darylldoyle/svg-sanitizer
A PHP SVG/XML Sanitizer
PHP★ 545↓ 1.3M/moJul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0