Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,382
Monthly downloads under inspection
386B
Median health index
57 Moderate
44,382 recordsRanked by popularity · browse by tag · record statistics
64Moderatehealth index
c4spar/cliffy
A TypeScript-first, runtime-agnostic command-line toolkit for building complex CLIs — featuring a command framework, argument parser, interactive prompts, tables, ANSI utilities, and more.
TypeScript★ 1,166Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
RubyGems
52Moderatehealth index
jordansissel/pleaserun
An attempt to abstract this "init" script madness.
Ruby★ 1,166Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Go · npm
69Moderatehealth index
openclaw/crabbox
Crabbox: warm a box, sync the diff, run the suite.
Go · TypeScript★ 1,166Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
77Goodhealth index
oruga-ui/oruga
🐛 Oruga is a lightweight Vue.js UI component library without any CSS dependency
Vue · TypeScript★ 1,166Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
PyPI
76Goodhealth index
Azure/GPT-RAG
Sharing the learning along the way we been gathering to enable Azure OpenAI at enterprise scale in a secure manner. GPT-RAG core is a Retrieval-Augmented Generation pattern running in Azure, using Azure Cognitive Search for retrieval and Azure OpenAI large language models to power ChatGPT-style and Q&A experiences.
Python · PowerShell★ 1,165Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
crates.io · npm
32At riskhealth index
rari-build/rari
rari: High-performance React Server Components framework powered by a Rust runtime, delivering 18.1x faster response times (0.12ms vs 2.17ms) and 67.4x higher throughput (97,826 vs 1,452 req/sec) than Next.js with zero-config setup.
Rust · TypeScript★ 1,165Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
70Goodhealth index
kristiandupont/kanel
Generate Typescript types from Postgres
TypeScript★ 1,164↓ 1.5M/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm · Packagist
79Goodhealth index
nextcloud/calendar
📆 Calendar app for Nextcloud
JavaScript · Vue · PHP★ 1,164Jul 17, 2026
AGPL-3.0Jul 17, 2026 · metrics 1.13.0
npm
56Moderatehealth index
sindresorhus/log-update
Log by overwriting the previous output in the terminal. Useful for rendering progress bars, animations, etc.
JavaScript★ 1,164↓ 182M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
54Moderatehealth index
felixge/httpsnoop
Package httpsnoop provides an easy way to capture http related metrics (i.e. response time, bytes written, and http status code) from your application's http.Handlers.
Go★ 1,163Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
crates.io
75Goodhealth index
ProvableHQ/snarkVM
A zkVM for Decentralized Private Computations (DPC)
Rust★ 1,162↓ 64.8K/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
daddyz/phonelib
Ruby gem for phone validation and formatting using google libphonenumber library data
Ruby★ 1,162Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
57Moderatehealth index
rails/importmap-rails
Use ESM with importmap to manage modern JavaScript in Rails without transpiling or bundling.
Ruby★ 1,162Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
36At riskhealth index
meziantou/Meziantou.Analyzer
A powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices—helping developers and AI write more reliable code.
C#★ 1,161Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · npm
61Moderatehealth index
sardanioss/httpcloak
Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic level (JA3/JA4, Akamai fingerprint, header order). Supports HTTP/1.1, HTTP/2, HTTP/3, sessions, cookies, and proxies.
Go · C#★ 1,161Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Hex
48At riskhealth index
tompave/fun_with_flags
Feature Flags/Toggles for Elixir
Elixir★ 1,161↓ 115.4K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
40At riskhealth index
RefoundAI/lenny-skills
86 product management skills from Lenny's Podcast for Claude Code and AI agents. Hiring, user research, strategy, shipping, and more.
Mixed★ 1,160Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
75Goodhealth index
pycurl/pycurl
PycURL - Python interface to libcurl
Python · C★ 1,160Jul 21, 2026
LGPL-2.1Jul 21, 2026 · metrics 1.13.0
32At riskhealth index
Mixed★ 1,159Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
28Criticalhealth index
isaacs/sax-js
A sax style parser for JS
JavaScript★ 1,159↓ 337M/moJul 22, 2026
BlueOak-1.0.0Jul 22, 2026 · metrics 1.13.0
59Moderatehealth index
csete/gpredict
Gpredict satellite tracking application
C★ 1,158Jul 28, 2026
GPL-2.0Jul 28, 2026 · metrics 1.13.0
PyPI
78Goodhealth index
angr/angr-management
The official angr GUI.
Python★ 1,157Jul 18, 2026
BSD-2-ClauseJul 18, 2026 · metrics 1.13.0
Hex
53Moderatehealth index
commanded/eventstore
Event store using PostgreSQL for persistence
Elixir★ 1,156↓ 37.3K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
crates.io · npm
66Moderatehealth index
gisto/gisto
Gisto is a Cross-platform snippets management application that allows you and/or your team share code snippets fast and easily. Based on GitHub Gists or GitLab snippets Infrastructure which means you can use all your existing snippets by connecting your GitHub/GitLab account!
TypeScript · CSS★ 1,156Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Go
79Goodhealth index
googleapis/go-genai
Google Gen AI Go SDK provides an interface for developers to integrate Google's generative models into their Go applications.
Go★ 1,156Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
RubyGems · Go
69Moderatehealth index
basecamp/thruster
No repository description published.
Go★ 1,155Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
npm
79Goodhealth index
scalameta/scalameta
Library to read, analyze, transform and generate Scala programs
Scala★ 1,155Jul 17, 2026
BSD-3-ClauseJul 17, 2026 · metrics 1.13.0
npm
73Goodhealth index
omrilotan/isbot
🤖/👨‍🦰 Detect bots/crawlers/spiders using the user agent string
TypeScript · JavaScript★ 1,153↓ 97.2M/moJul 16, 2026
UnlicenseJul 16, 2026 · metrics 1.13.0