Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
43,160
Monthly downloads under inspection
384B
Median health index
57 Moderate
43,160 recordsRanked by popularity · browse by tag · record statistics
npm
71Goodhealth index
forwardemail/forwardemail.net
Privacy-focused encrypted email for everyone. All-in-one alternative to Gmail + Mailchimp + Sendgrid.
JavaScript · Pug★ 1,624Jul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
NuGet
75Goodhealth index
TestableIO/System.IO.Abstractions
Just like System.Web.Abstractions, but for System.IO. Yay for testable IO access!
C#★ 1,623Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
74Goodhealth index
gbdev/rgbds
Rednex Game Boy Development System - An assembly toolchain for the Nintendo Game Boy and Game Boy Color
C++ · Assembly★ 1,623Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
58Moderatehealth index
jlesage/docker-baseimage-gui
A minimal docker baseimage to ease creation of X graphical application containers
Shell · C++ · JavaScript★ 1,623Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI
73Goodhealth index
django/asgiref
ASGI specification and utilities
Python★ 1,622Jul 17, 2026
BSD-3-ClauseJul 17, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
un33k/python-slugify
Returns unicode slugs
Python★ 1,622Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
RubyGems
48At riskhealth index
adzap/validates_timeliness
Date and time validation plugin for ActiveModel and Rails. Supports multiple ORMs and allows custom date/time formats.
Ruby★ 1,621Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
60Moderatehealth index
opendatalab/labelu
Open-source multimodal data annotation platform with AI auto-annotation support.
Python★ 1,621Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
PyPI
66Moderatehealth index
kernalix7/winpodx
Windows pod system for Linux
Python★ 1,620Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
68Moderatehealth index
ecsphp/ecs
ECS runs PHP-CS-Fixer and PHP_CodeSniffer as a single, parallel fast tool with zero dependencies. Run on PHP 7.2+
PHP★ 1,618↓ 921.6K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
71Goodhealth index
psake/psake
A build automation tool written in PowerShell
PowerShell★ 1,618Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
46At riskhealth index
spotbye/SpotiFLAC-Next
Get Spotify tracks in true Lossless from Tidal, Qobuz, Amazon Music & Deezer — no account required.
Mixed★ 1,617Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
73Goodhealth index
tediousjs/tedious
Node TDS module for connecting to SQL Server databases.
TypeScript★ 1,617↓ 16.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
66Moderatehealth index
alexandersimoes/d3plus
A javascript library that extends D3.js to enable fast and beautiful visualizations.
JavaScript · TypeScript★ 1,616Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
70Goodhealth index
d3plus/d3plus
A javascript library that extends D3.js to enable fast and beautiful visualizations.
JavaScript · TypeScript★ 1,616↓ 11.4K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
73Goodhealth index
gronxb/hot-updater
A self-hostable OTA update solution for React Native (Alternative to CodePush)
TypeScript★ 1,616Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
60Moderatehealth index
hyprwm/hyprlock
Hyprland's GPU-accelerated screen locking utility
C++★ 1,616Jul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 1.13.0
npm
68Moderatehealth index
pekim/tedious
Node TDS module for connecting to SQL Server databases.
TypeScript★ 1,616Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Maven
67Moderatehealth index
mekanism/mekanism
A mod for Minecraft
Java★ 1,615↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
crates.io
67Moderatehealth index
pawurb/hotpath-rs
Quickly find bottlenecks in Rust - one profiler for CPU, time, memory, SQL and async code.
Rust★ 1,615↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
npm
75Goodhealth index
microsoft/vscode-generator-code
Visual Studio Code extension generator
JavaScript★ 1,614↓ 25.6K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
78Goodhealth index
mongodb/mongo-php-library
The Official MongoDB PHP library
PHP★ 1,614↓ 1.2M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go
67Moderatehealth index
charlie0129/batt
Control and limit battery charging on Apple Silicon MacBooks.
Go★ 1,613Jul 15, 2026
GPL-2.0Jul 15, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
laravel/envoy
Elegant SSH tasks for PHP.
PHP★ 1,613↓ 121.8K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
46At riskhealth index
nophead/NopSCADlib
Library of parts modelled in OpenSCAD and a framework for making projects
OpenSCAD★ 1,611Jul 22, 2026
GPL-3.0Jul 22, 2026 · metrics 1.13.0
RubyGems
62Moderatehealth index
sporkmonger/addressable
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. It is flexible, offers heuristic parsing, and additionally provides extensive support for IRIs and URI templates.
Ruby★ 1,611Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
70Goodhealth index
AikidoSec/safe-chain
Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.
JavaScript★ 1,610Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
PyPI
81Goodhealth index
MDAnalysis/mdanalysis
MDAnalysis is a Python library to analyze molecular dynamics simulations.
Python★ 1,610↓ 219.6K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
NuGet
74Goodhealth index
duendesoftware/products
The most flexible and standards-compliant OpenID Connect and OAuth 2.x framework for ASP.NET Core
C#★ 1,610Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
Go
85Excellenthealth index
iotexproject/iotex-core
Official implementation of IoTeX blockchain protocol in Go. An ultra-efficient EVM blockchain offering 1000 TPS with instant 1-block finality. Perfect for DeFi, DePIN tokenomics, Identities, and any trusted logic requiring Web3 composability
Go★ 1,610Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0