Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,067
Monthly downloads under inspection
386B
Median health index
57 Moderate
12,186 recordsRanked by popularity · browse by tag · record statistics
Packagist
57Moderatehealth index
cobwebch/external_import
No repository description published.
PHP★ 23↓ 7,386/moJul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
npm · PyPI · crates.io
69Moderatehealth index
decibri/decibri
Cross-platform audio capture, playback, and voice activity detection for Python, Rust, and Node.js powered by a single Rust core.
Rust · Python · JavaScript★ 23↓ 19.3K/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Go
64Moderatehealth index
dvdmuckle/spc
A lightweight multiplatform CLI for Spotify
Go★ 23Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm
60Moderatehealth index
egonSchiele/agency-lang
No repository description published.
TypeScript · JavaScript★ 23↓ 3,841/moJul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm
53Moderatehealth index
entwico/astroscope
Astro integrations built for production — logging, tracing, security, i18n, and more for real-world websites.
TypeScript★ 23↓ 6,901/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
60Moderatehealth index
fanquake/bitcoin
Bitcoin integration/staging tree
C++ · Python · C★ 23Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
RubyGems
45At riskhealth index
halfbyte/afm
A simple library to read Adobe Font Metrics files.
Ruby★ 23Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
64Moderatehealth index
k1LoW/tbls-ask
tbls-ask is an external subcommand of tbls for asking LLM of the datasource.
Go★ 23Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
42At riskhealth index
kingwill101/liquify
Liquid templating library for dart
Dart★ 23Jul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
Go
57Moderatehealth index
man90es/BDO-REST-API
Scraper for Black Desert Online community data with a built-in API server.
Go★ 23Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist
50Moderatehealth index
matasarei/json-rpc
Simple Json-RPC PHP client/server that just works.
PHP★ 23↓ 13.9K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
33At riskhealth index
micromatch/is-extglob
Returns true if a string has an extglob
JavaScript★ 23Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
65Moderatehealth index
microsoft/mu_feature_dfci
DFCI - Device Firmware Configuration Interface
C · Python · RobotFramework★ 23Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
68Moderatehealth index
mulgadc/spinifex
Spinifex – Open source AWS-compatible platform for secure edge deployments. Run EC2, VPC, S3, and EBS-like services on bare metal with full control. Built for environments where running in the cloud isn’t an option. Whether you’re deploying to edge sites, private data-centers, or operating in low-connectivity or highly contested environments.
Go · TypeScript★ 23Jul 28, 2026
AGPL-3.0Jul 28, 2026 · metrics 1.13.0
Go
51Moderatehealth index
mws-cloud-platform/go-sdk
Official Go SDK for MWS Cloud Platform
Go★ 23Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
13Criticalhealth index
ngmoco/syslog_logger
An improved Logger replacement that logs to syslog. It is almost drop-in with a few caveats.
Ruby★ 23Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
RubyGems · npm
74Goodhealth index
pgharts/trusty-cms
TrustyCMS is a modern, Ruby on Rails-driven CMS that can be extended for any business needs.
JavaScript · Ruby★ 23Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Packagist
43At riskhealth index
sclable/xml-lint
A php tool to lint and validate xml files from the commandline.
PHP★ 23↓ 7,974/moJul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
50Moderatehealth index
seh/rules_cue
CUE rules for Bazel
Starlark · Shell★ 23Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 1.13.0
crates.io
53Moderatehealth index
sigp/tree_hash
SSZ-compatible tree hash implementation optimised for speed and security
Rust★ 23↓ 568.5K/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Packagist
52Moderatehealth index
staabm/phpstan-psr3
FIG PSR3 PHPStan rules
PHP★ 23↓ 176.5K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
46At riskhealth index
teoljungberg/minitest-fail-fast
Reimplements RSpec's "fail fast" feature for minitest
Ruby★ 23Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Maven
75Goodhealth index
Alfresco/alfresco-java-sdk
Alfresco Out-Of-Process SDK for Java Developers
Java · Mustache★ 22Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
66Moderatehealth index
Belphemur/CBZOptimizer
CBZOptimizer is a Go-based tool designed to optimize CBZ (Comic Book Zip) files by converting images to a specified format and quality. This tool is useful for reducing the size of comic book archives while maintaining acceptable image quality.
Go★ 22Jul 28, 2026
GPL-3.0Jul 28, 2026 · metrics 1.13.0
npm
55Moderatehealth index
FortAwesome/fa-icon-chooser
an icon chooser implemented as a web component
CSS · TypeScript★ 22↓ 3,989/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
65Moderatehealth index
Kikobeats/isolated-function
A modern solution for running untrusted code in Node.js
JavaScript★ 22↓ 3,760/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
NuGet
40At riskhealth index
SoftCircuits/IniFileParser
Lightweight INI-file parser that can be used to easily read and write INI files. It includes direct support for string, int, double and bool setting types.
C#★ 22Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
NuGet
10Criticalhealth index
Taritsyn/DartSassHost
.NET wrapper around the Dart Sass.
JavaScript · C#★ 22Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
62Moderatehealth index
TryGhost/bookshelf-relations
Bookshelf.js plugin that applies nested relation changes while saving models
JavaScript★ 22↓ 49.7K/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0