Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
43,843
Monthly downloads under inspection
386B
Median health index
57 Moderate
43,843 recordsRanked by popularity · browse by tag · record statistics
PyPI · npm
76Goodhealth index
py-pdf/fpdf2
Simple PDF generation for Python
Python★ 1,530Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
npm
34At riskhealth index
jshttp/cookie
HTTP server cookie parsing and serialization
TypeScript★ 1,529↓ 693M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
80Goodhealth index
google/tensorstore
Library for reading and writing large multi-dimensional arrays.
C++★ 1,528↓ 3.2M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
76Goodhealth index
phpstan/phpdoc-parser
Next-gen phpDoc parser with support for intersection types and generics
PHP★ 1,528↓ 10.7M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
ryanto/acts_as_votable
Votable ActiveRecord for Rails
Ruby★ 1,527Jul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
crates.io
66Moderatehealth index
dtolnay/typetag
Serde serializable and deserializable trait objects
Rust★ 1,525↓ 5.8M/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Hex
70Goodhealth index
zhongwencool/observer_cli
Visualize Erlang/Elixir Nodes On The Command Line
Erlang★ 1,525↓ 411.4K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
crates.io
63Moderatehealth index
bgreenwell/lstr
A fast, minimalist directory tree viewer, written in Rust.
Rust★ 1,524↓ 94/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
Packagist
15Criticalhealth index
composer/package-versions-deprecated
:package: Composer addon to efficiently get installed packages' version numbers
PHP★ 1,524↓ 1.8M/moJul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
73Goodhealth index
kovetskiy/mark
Sync your markdown files with Confluence pages.
Go★ 1,524Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm · RubyGems
81Goodhealth index
owasp/threat-dragon
An open source threat modeling tool from OWASP
JavaScript · Vue★ 1,523Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
npm
80Goodhealth index
adobe/spectrum-web-components
Spectrum Web Components
TypeScript · CSS★ 1,522↓ 0/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Hex
77Goodhealth index
swoosh/swoosh
Compose, deliver and test your emails easily in Elixir
Elixir★ 1,522↓ 523.6K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
RubyGems
57Moderatehealth index
zquestz/omniauth-google-oauth2
Oauth2 strategy for Google
Ruby★ 1,521Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
PyPI
85Excellenthealth index
intel/auto-round
A SOTA quantization algorithm for high-accuracy low-bit LLM inference, seamlessly optimized for CPU/XPU/CUDA, with multi-datatype support and full compatibility with vLLM, SGLang, and Transformers.
Python · C++★ 1,520Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
—
57Moderatehealth index
DLTcollab/sse2neon
A translator from Intel SSE intrinsics to Arm/Aarch64 NEON implementation
C++ · C · Python★ 1,519Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Hex
70Goodhealth index
elixir-grpc/grpc
An Elixir implementation of gRPC
Elixir★ 1,518↓ 242.5K/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
43At riskhealth index
peritus/bumpversion
Version-bump your software with a single command
Python★ 1,518↓ 1.3M/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
67Moderatehealth index
ChromeDevTools/devtools-protocol
Chrome DevTools Protocol
TypeScript · Shell · JavaScript★ 1,517↓ 103M/moJul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 1.13.0
npm · Packagist
82Goodhealth index
getkirby/kirby
Kirby's core application folder
PHP★ 1,517↓ 18.9K/moJul 13, 2026
Custom licenseJul 13, 2026 · metrics 1.13.0
npm
66Moderatehealth index
midudev/tailwind-animations
Easy peasy animations for your Tailwind project
Astro · JavaScript · CSS★ 1,516↓ 16.2K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
62Moderatehealth index
vercel-labs/emulate
Local API emulation for CI and no-network sandboxes
TypeScript★ 1,516Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
npm
78Goodhealth index
kitware/vtk-js
Visualization Toolkit for the Web
JavaScript★ 1,515↓ 24.6K/moJul 15, 2026
BSD-3-ClauseJul 15, 2026 · metrics 1.13.0
crates.io
77Goodhealth index
mongodb/mongo-rust-driver
The official MongoDB Rust Driver
Rust★ 1,515↓ 1.7M/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
crates.io
79Goodhealth index
nats-io/nats.rs
Rust client for NATS, the cloud native messaging system.
Rust★ 1,515↓ 5.9M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
74Goodhealth index
JuliaSymbolics/Symbolics.jl
Symbolic programming for the next generation of numerical software
Julia★ 1,514Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go · Maven · npm
51Moderatehealth index
a9gent/mindfs
Access your personal AI agents and workstation data anywhere, anytime through MindFS.
TypeScript · Go★ 1,514Jul 18, 2026
AGPL-3.0Jul 18, 2026 · metrics 1.13.0
npm
55Moderatehealth index
geelen/mcp-remote
No repository description published.
TypeScript★ 1,514↓ 1.7M/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0