Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
41,983
Monthly downloads under inspection
384B
Median health index
57 Moderate
15,484 recordsRanked by popularity · browse by tag · record statistics
Go · npm
79Goodhealth index
anchore/scan-action
Anchore container analysis and scan provided as a GitHub Action
JavaScript★ 286Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm
47At riskhealth index
ehmicky/human-signals
Human-friendly process signals
JavaScript · TypeScript★ 286↓ 513M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
—
84Goodhealth index
microsoft/mu_basecore
Project Mu BaseCore
C · Python★ 286Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
PyPI
70Goodhealth index
runtm-ai/runtm
Open-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.
Python · Go★ 286Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 1.13.0
—
50Moderatehealth index
JuliaSIMD/Polyester.jl
The cheapest threads you can find!
Julia★ 285Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
61Moderatehealth index
jshttp/statuses
HTTP status utility
JavaScript★ 285↓ 694M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
64Moderatehealth index
landlock-lsm/rust-landlock
A Rust library for the Linux Landlock sandboxing feature
Rust★ 285↓ 1.7M/moJul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
PyPI
55Moderatehealth index
matiasb/python-unidiff
Unified diff python parsing/metadata extraction library
Python★ 285↓ 43.6M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
53Moderatehealth index
microsoft/SysinternalsEBPF
The Linux port of the Sysinternals Sysmon tool.
C★ 285Jul 20, 2026
LGPL-2.1Jul 20, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
openSUSE/opi
OBS Package Installer (CLI)
Python★ 285Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist · PyPI
57Moderatehealth index
plank/laravel-metable
A package for handling arbitrary data in Laravel 5 applications
PHP★ 285↓ 28.2K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
55Moderatehealth index
sindresorhus/import-fresh
Import a module while bypassing the cache
JavaScript★ 285↓ 558M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
80Goodhealth index
AzureAD/microsoft-authentication-library-for-go
The MSAL library for Go is part of the Microsoft identity platform for developers (formerly named Azure AD) v2.0. It enables you to acquire security tokens to call protected APIs. It uses industry standard OAuth2 and OpenID Connect.
Go★ 284Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
RubyGems
44At riskhealth index
BaseSecrete/active_hashcash
Protect Rails applications against bots and brute force attacks without annoying humans.
HTML · Ruby · JavaScript★ 284Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
23Criticalhealth index
jonschlinkert/is-number
JavaScript/Node.js utility. Returns `true` if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.
JavaScript★ 284↓ 714M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
70Goodhealth index
jonycheung/deadsimple-less-watch-compiler
A nodejs script that allows you to watch a folder for changes and compile the less css files into another folder.
JavaScript · TypeScript★ 284↓ 52.2K/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
crates.io
61Moderatehealth index
paritytech/parity-db
Experimental blockchain database
Rust★ 284↓ 273.6K/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Packagist · PyPI
68Moderatehealth index
portphp/portphp
Data import/export framework for PHP
PHP★ 284↓ 55.5K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go · npm
78Goodhealth index
tinkerbell/tinkerbell
Bare metal provisioning engine, supporting network and ISO booting, BMC interactions, metadata service, and workflow engine.
Go★ 284Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
72Goodhealth index
vuetifyjs/nuxt-module
💚 Zero-config Nuxt Module for Vuetify
TypeScript★ 284↓ 178.2K/moJul 27, 2026
Custom licenseJul 27, 2026 · metrics 1.13.0
RubyGems
40At riskhealth index
grosser/rspec-instafail
Show failing specs instantly
Ruby★ 283Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
58Moderatehealth index
mrhooray/kdtree-rs
K-dimensional tree in Rust for fast geospatial indexing and lookup
Rust★ 283↓ 151.6K/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
—
39At riskhealth index
yaling888/quirktiva
Quirktiva
Go · C★ 283Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
zertosh/loose-envify
Like envify but much faster
JavaScript★ 283↓ 434M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io · npm
60Moderatehealth index
FuelLabs/fuelup
⛽ The Fuel toolchain installer
Rust★ 282↓ 16/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm · crates.io · PyPI
36At riskhealth index
LTplus-AG/ifc-lite
Parse, view, query, edit, and export IFC, IDS, BCF, pointclouds and more AEC stuff. In the browser, server or desktop.
TypeScript · Rust · C#★ 282↓ 17.7K/moJul 21, 2026
MPL-2.0Jul 21, 2026 · metrics 1.13.0
—
68Moderatehealth index
QIICR/dcmqi
dcmqi (DICOM for Quantitative Imaging) is a C++ library for conversion between imaging research formats and the standard DICOM representation for image analysis results
C++ · CMake★ 282Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
52Moderatehealth index
bmcfee/resampy
Efficient sample rate conversion in python
Python★ 282Jul 21, 2026
ISCJul 21, 2026 · metrics 1.13.0