Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
46,942
Monthly downloads under inspection
389B
Median health index
57 Moderate
46,942 recordsRanked by popularity · browse by tag · record statistics
PyPI
80Goodhealth index
microsoft/semantic-link-labs
Early access to new features for Microsoft Fabric's Semantic Link.
Python★ 549↓ 2.1M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
crates.io
69Moderatehealth index
paradigmxyz/solar
Blazingly fast, modular and contributor friendly Solidity compiler, written in Rust
Rust★ 549↓ 0/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Packagist
68Moderatehealth index
zbateson/mail-mime-parser
An email parser written in PHP
PHP★ 549↓ 1.4M/moJul 24, 2026
BSD-2-ClauseJul 24, 2026 · metrics 1.13.0
47At riskhealth index
ArduPilot/apm_planner
APM Planner Ground Control Station (Qt)
C++ · C★ 548Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
57Moderatehealth index
NCBI/Datasets
NCBI Datasets is a new resource that lets you easily gather data from across NCBI databases.
Jupyter Notebook · Go★ 548Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
npm · Maven · RubyGems
81Goodhealth index
auth0/react-native-auth0
React Native toolkit for Auth0 API
TypeScript★ 548↓ 595.8K/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
npm · Packagist
65Moderatehealth index
msrbuilds/elementor-mcp
WordPress plugin that turns Elementor & WordPress into an MCP server. 120+ AI-ready tools for building, editing, and managing page designs programmatically.
PHP★ 548↓ 3,275/moJul 18, 2026
GPL-2.0Jul 18, 2026 · metrics 1.13.0
PyPI
43At riskhealth index
tiran/defusedxml
No repository description published.
Python★ 548Jul 16, 2026
Custom licenseJul 16, 2026 · metrics 1.13.0
Maven · PyPI
80Goodhealth index
GoogleCloudPlatform/spring-cloud-gcp
New home for Spring Cloud GCP development starting with version 2.0.
Java★ 547Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
crates.io · PyPI
71Goodhealth index
NVIDIA/NVTX
The NVIDIA® Tools Extension SDK (NVTX) is a C-based Application Programming Interface (API) for annotating events, code ranges, and resources in your applications.
C++ · C · Rust★ 547↓ 1/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
81Goodhealth index
cve-search/vulnerability-lookup
Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD).
Python · HTML★ 547Jul 19, 2026
AGPL-3.0Jul 19, 2026 · metrics 1.13.0
64Moderatehealth index
dotnet/roslyn-sdk
Roslyn-SDK templates and Syntax Visualizer
C# · PowerShell★ 547Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
RubyGems
16Criticalhealth index
haf/DotNetZip.Semverd
Please use System.IO.Compression! A fork of the DotNetZip project without signing with a solution that compiles cleanly. This project aims to follow semver to avoid versioning conflicts. DotNetZip is a FAST, FREE class library and toolset for manipulating zip files. Use VB, C# or any .NET language to easily create, extract, or update zip files.
C# · Rich Text Format★ 547Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 1.13.0
67Moderatehealth index
kubedb/docs
KubeDB Docs
Shell★ 547Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
47At riskhealth index
microsoft/rayfin
Backend-as-a-Service with built-in auth, data, and more
Mixed★ 547Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
npm
51Moderatehealth index
rse/stmux
Simple Terminal Multiplexer for Node.js Environments
TypeScript · JavaScript★ 547↓ 105.8K/moJul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
RubyGems
65Moderatehealth index
stitchfix/stitches
Create a Microservice in Rails with minimal ceremony
Ruby★ 547Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
RubyGems
56Moderatehealth index
toland/patron
Ruby HTTP client based on libcurl
C · Ruby★ 547Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
63Moderatehealth index
avids2/memorix
Open-source cross-agent memory layer for coding agents via MCP. Compatible with Claude Code, Codex, Cursor, Windsurf, Gemini CLI, Antigravity, OpenClaw, Hermes Agent, Oh-my-Pi, Pi, Copilot, Kiro, OpenCode, and Trae.
TypeScript★ 546↓ 2,444/moJul 13, 2026
Apache-2.0Jul 13, 2026 · metrics 1.13.0
npm · PyPI
20Criticalhealth index
Python · Solidity★ 546Jul 18, 2026
AGPL-3.0Jul 18, 2026 · metrics 1.13.0
Go
69Moderatehealth index
k1LoW/git-wt
A Git subcommand that makes `git worktree` simple
Go★ 546Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
crates.io
65Moderatehealth index
lu-zero/cargo-c
build and install C-compatible libraries
Rust★ 546↓ 34.1K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
74Goodhealth index
wevm/abitype
Strict TypeScript types for Ethereum ABIs
TypeScript★ 546↓ 22.5M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm · PyPI
20Criticalhealth index
yearn/yearn-vaults
Yearn Vaults v2
Python · Solidity★ 546Jul 18, 2026
AGPL-3.0Jul 18, 2026 · metrics 1.13.0
Packagist · PyPI
62Moderatehealth index
FriendsOfCake/cakephp-upload
CakePHP: Handle file uploading sans ridiculous automagic
PHP★ 545↓ 32.1K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · npm
60Moderatehealth index
creagia/laravel-sign-pad
A Laravel package to sign documents and optionally generate certified PDFs associated with Eloquent models.
PHP★ 545↓ 10.2K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
darylldoyle/svg-sanitizer
A PHP SVG/XML Sanitizer
PHP★ 545↓ 1.3M/moJul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
61Moderatehealth index
encode/httpcore
A minimal HTTP client. ⚙️
Python★ 545↓ 722M/moJul 16, 2026
BSD-3-ClauseJul 16, 2026 · metrics 1.13.0
77Goodhealth index
microsoft/component-detection
Scans your project to determine what components you use
C#★ 545Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0