Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
42,649
Monthly downloads under inspection
384B
Median health index
57 Moderate
13,915 recordsRanked by popularity · browse by tag · record statistics
PyPI
24Criticalhealth index
2ik/django-editorjs-fields
Django plugin for using Editor.js
Python · CSS★ 152Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
NuGet
29Criticalhealth index
Dreamescaper/ServiceScan.SourceGenerator
Assembly scanning source generator for Microsoft.Extensions.DependencyInjection
C#★ 152Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
amphp/parser
A generator parser to make streaming parsers simple.
PHP★ 152↓ 2.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
54Moderatehealth index
comex/rust-shlex
Split a string into shell words, like Python's shlex.
Rust★ 152↓ 63.8M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
74Goodhealth index
github/gh-aw-mcpg
Github Agentic Workflows MCP Gateway
Go · Rust★ 152Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Hex
57Moderatehealth index
jvoegele/external_service
Elixir library for safely using any external service or API using automatic retry with rate limiting and circuit breakers.
Elixir★ 152↓ 8,287/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
crates.io · npm · PyPI
54Moderatehealth index
neovim/tree-sitter-vimdoc
Tree-sitter parser for Vim help files
JavaScript · Tree-sitter Query★ 152↓ 5/moJul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
npm
66Moderatehealth index
octokit/types.ts
Shared TypeScript definitions for Octokit projects
TypeScript★ 152↓ 231M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
63Moderatehealth index
paolobarbolini/rusty-s3
Simple pure Rust AWS S3 Client following a Sans-IO approach
Rust★ 152↓ 82.5K/moJul 21, 2026
BSD-2-ClauseJul 21, 2026 · metrics 1.13.0
PyPI
58Moderatehealth index
python-hyper/brotlicffi
Python bindings to the Brotli compression library
Python★ 152↓ 4.5M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
78Goodhealth index
quay/claircore
foundation modules for scanning container packages and reporting vulnerabilities
Go★ 152Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
NuGet
53Moderatehealth index
shinyorg/templates
dotnet CLI & Visual Studio Templates
C#★ 152Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
crates.io
61Moderatehealth index
solana-foundation/txtx
Terraform for web3. Reproducible deployments and secure operations for Bitcoin, Ethereum and Solana.
Rust★ 152Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
60Moderatehealth index
zio/zio-aws
Low level ZIO interface for the full AWS
Scala★ 152Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
PyPI
55Moderatehealth index
CourtBouillon/pydyf
A low-level PDF creator
Python★ 151↓ 29M/moJul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
crates.io
20Criticalhealth index
L4z3x/mal-cli
Terminal Interface for the official MyAnimeList api.
Rust★ 151↓ 10/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm
73Goodhealth index
OriginProtocol/origin-dollar
OUSD and OETH are stablecoins that passively accrue yield while you are holding it
JavaScript · Solidity · Python★ 151Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
61Moderatehealth index
bluekeyes/go-gitdiff
Go library for parsing and applying patches created by Git
Go★ 151Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
d5h-foss/grpc-interceptor
Simplified Python gRPC interceptors
Python★ 151↓ 24M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
63Moderatehealth index
frankie567/httpx-ws
WebSocket support for HTTPX
Python★ 151Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
50Moderatehealth index
pipermerriam/flex
Swagger schema validator
Python★ 151↓ 80.4K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
58Moderatehealth index
JuliaNLSolvers/LineSearches.jl
Line search methods for optimization and root-finding
Julia★ 150Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
npm
34At riskhealth index
TimelordUK/node-sqlserver-v8
branched from node-sqlserver, SQL server driver compatible with all versions of Node
C++ · JavaScript★ 150↓ 185.3K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
63Moderatehealth index
dcarbone/php-fhir
Tools for consuming data from a FHIR server with PHP
PHP★ 150↓ 4,089/moJul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
61Moderatehealth index
evolbioinfo/gotree
Gotree: a set of command line tools and an API to manipulate phylogenetic trees.
Go · Shell★ 150Jul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0
npm
14Criticalhealth index
fitzgen/glob-to-regexp
Convert a glob to a regular expression
JavaScript★ 150↓ 180M/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
20Criticalhealth index
mafintosh/end-of-stream
Call a callback when a readable/writable/duplex stream has completed or failed.
JavaScript★ 150↓ 366M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0