Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
47,233
Monthly downloads under inspection
389B
Median health index
57 Moderate
47,233 recordsRanked by popularity · browse by tag · record statistics
npm
33At riskhealth index
harshankur/officeParser
A robust, strictly-typed Node.js and Browser library for parsing office files into a rich Abstract Syntax Tree (AST) and generating high-fidelity output in multiple formats. Parses: docx · pptx · xlsx · odt · odp · ods · pdf · rtf · csv · md · html. Generates: Markdown · HTML · CSV · RTF · PDF · Plain Text · RAG Chunks
Rich Text Format · HTML★ 502↓ 2.1M/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
63Moderatehealth index
ironsh/iron-proxy
An egress firewall for untrusted workloads.
Go★ 502Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
63Moderatehealth index
laspy/laspy
Laspy is a pythonic interface for reading/modifying/creating .LAS LIDAR files matching specification 1.0-1.4.
Python★ 502↓ 1.8M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Go · npm
65Moderatehealth index
modiimedia/arri
Arri RPC is a code-first RPC framework for end-to-end type safety in any language
TypeScript · Rust · Kotlin★ 502↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
PyPI
80Goodhealth index
scikit-build/scikit-build-core
A next generation Python CMake adaptor and Python API for plugins
Python · CMake★ 502↓ 9.7M/moJul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
Go
66Moderatehealth index
trzsz/tsshd
tsshd is a UDP-based SSH server built for unreliable networks. It supports seamless roaming across networks and IP changes, and works well on high-latency links such as cellular connections and unstable Wi-Fi.
Go★ 502Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
72Goodhealth index
Foblex/f-flow
Angular-native node-based UI library: node editors, workflow builders, flowcharts and interactive graph interfaces. The React-Flow-class toolkit for Angular.
TypeScript★ 501↓ 0/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
Packagist
60Moderatehealth index
dg/dibi
Dibi - smart database abstraction layer
PHP★ 501↓ 54.6K/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
crates.io
63Moderatehealth index
kevinmehall/nusb
A new pure-Rust library for cross-platform low-level access to USB devices.
Rust★ 501↓ 121.9K/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
72Goodhealth index
psf/cachecontrol
The httplib2 caching algorithms packaged up for use with requests.
Python★ 501Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
38At riskhealth index
rikimaru0345/Ceras
Universal binary serializer for a wide variety of scenarios https://discord.gg/FGaCX4c
C#★ 501Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
47At riskhealth index
Poly-Haven/polyhavenassets
A Blender add-on to integrate our assets natively in the asset browser
Python★ 500Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
70Goodhealth index
StuMason/coolify-mcp
MCP server for Coolify — 42 optimized tools for managing self-hosted PaaS through AI assistants
TypeScript★ 500↓ 11.5K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
85Excellenthealth index
epam/ai-dial-chat
A default UI for AI DIAL
TypeScript★ 500↓ 0/moJul 13, 2026
Apache-2.0Jul 13, 2026 · metrics 1.13.0
npm
83Goodhealth index
fastify/fastify-static
Plugin for serving static files as fast as possible
JavaScript★ 500↓ 16.6M/moJul 31, 2026
MITJul 31, 2026 · metrics 1.13.0
crates.io
57Moderatehealth index
helsing-ai/sguaba
A Rust crate that provides hard-to-misuse rigid body transforms (aka "spatial math") for engineers with other things to worry about than linear algebra.
Rust★ 500↓ 5,792/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Hex
56Moderatehealth index
inertiajs/inertia-phoenix
The Phoenix adapter for Inertia.js.
Elixir★ 500↓ 6,007/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go · npm
76Goodhealth index
ivpn/desktop-app
Official IVPN Desktop app
Go · Vue · JavaScript★ 500Jul 18, 2026
GPL-3.0Jul 18, 2026 · metrics 1.13.0
PyPI
42At riskhealth index
jarus/flask-testing
Unittest extensions for Flask
Python★ 500↓ 639.8K/moJul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
73Goodhealth index
jump-dev/MathOptInterface.jl
A data structure for mathematical optimization problems
Julia★ 500Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
59Moderatehealth index
lycheeverse/lychee-action
Github action to check for broken links in Markdown, HTML, and text files using lychee, a fast link checker written in Rust.
Shell★ 500Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
crates.io
63Moderatehealth index
yoshuawuyts/futures-concurrency
Structured concurrency operations for async Rust
Rust★ 500↓ 866.9K/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
78Goodhealth index
analogdevicesinc/scopy
A software oscilloscope and signal analysis toolset
C++ · JavaScript★ 499Jul 22, 2026
GPL-3.0Jul 22, 2026 · metrics 1.13.0
Packagist · npm
50Moderatehealth index
cebe/php-openapi
Read and write OpenAPI yaml/json files and make the content accessible in PHP objects.
PHP★ 499↓ 223.2K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
73Goodhealth index
k1LoW/octocov
octocov is a toolkit for collecting code metrics (code coverage, code to test ratio, test execution time and your own custom metrics).
Go★ 499Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 1.13.0
npm
67Moderatehealth index
octokit/graphql.js
GitHub GraphQL API client for browsers and Node
TypeScript★ 499↓ 130M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
31At riskhealth index
pdvrieze/xmlutil
XML Serialization library for Kotlin
Kotlin★ 499Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
73Goodhealth index
Cranot/roam-code
Local codebase intelligence CLI + MCP server for AI coding agents: SQLite code graph, 28 languages, 238 commands, 224 MCP tools, change-safety gates, audit evidence, zero API keys.
Python★ 498↓ 5,430/moJul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
PyPI
82Goodhealth index
aws/bedrock-agentcore-starter-toolkit
Python CLI toolkit for Amazon Bedrock AgentCore (legacy). For new projects, use the AgentCore CLI: https://github.com/aws/agentcore-cli
Python★ 498Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 1.13.0