Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,451
Monthly downloads under inspection
380B
Median health index
57 Moderate
38,451 recordsRanked by popularity · browse by tag · record statistics
npm
76Goodhealth index
measuredco/puck
The visual editor for React.
TypeScript · MDX★ 13KJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Maven
30At riskhealth index
alibaba/COLA
🥤 COLA: Clean Object-oriented & Layered Architecture
Java★ 13KJul 21, 2026
LGPL-2.1Jul 21, 2026 · metrics 1.13.0
RubyGems
76Goodhealth index
capistrano/capistrano
A deployment automation tool built on Ruby, Rake, and SSH.
Ruby★ 13KJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
79Goodhealth index
e2b-dev/e2b
Open-source, secure environment with real-world tools for enterprise-grade agents.
Python★ 13K↓ 0/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
npm
76Goodhealth index
puckeditor/puck
The visual editor for React.
TypeScript★ 13K↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
npm
77Goodhealth index
graphile/crystal
🔮 Graphile's Crystal Monorepo; home to Grafast, PostGraphile, pg-introspection, pg-sql2 and much more!
TypeScript★ 12.9K↓ 0/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
Maven
77Goodhealth index
debezium/debezium
Change data capture for a variety of databases. Please log issues at https://github.com/debezium/dbz/issues.
Java★ 12.9KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
77Goodhealth index
spatie/laravel-permission
Associate users with roles and permissions
PHP★ 12.9K↓ 4.4M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
PyPI
69Moderatehealth index
instaloader/instaloader
Download pictures (or videos) along with their captions and other metadata from Instagram.
Python★ 12.9KJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
RubyGems
86Excellenthealth index
rubocop/rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
Ruby★ 12.9KJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go
78Goodhealth index
heroiclabs/nakama
Scalable open-source game backend server: multiplayer, matchmaking, leaderboards, chat, and social features for games.
Go★ 12.9KJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
85Excellenthealth index
pypa/pipx
Install and Run Python Applications in Isolated Environments
Python★ 12.9K↓ 6.9M/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
PyPI
75Goodhealth index
seleniumbase/SeleniumBase
📊 APIs for web automation, testing, and bypassing bot-detection.
Python★ 12.9K↓ 3M/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
64Moderatehealth index
vnotex/vnote
A pleasant note-taking platform in native C++.
C++ · JavaScript★ 12.9KJul 22, 2026
LGPL-3.0Jul 22, 2026 · metrics 1.13.0
npm
81Goodhealth index
modelcontextprotocol/typescript-sdk
The official TypeScript SDK for Model Context Protocol servers and clients
TypeScript★ 12.8K↓ 0/moJul 14, 2026
Custom licenseJul 14, 2026 · metrics 1.13.0
Maven · npm
77Goodhealth index
codecentric/spring-boot-admin
Admin UI for administration of spring boot applications
Java · TypeScript · Vue★ 12.8KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
87Excellenthealth index
aws/aws-cdk
The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code
TypeScript★ 12.8KJul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
crates.io · npm
81Goodhealth index
web-infra-dev/rspack
Fast Rust-based bundler for the web with a modernized webpack API 🦀
Rust★ 12.8K↓ 85/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
npm
69Moderatehealth index
mindfold-ai/trellis
The best agent harness.
TypeScript · Python★ 12.8KJul 17, 2026
AGPL-3.0Jul 17, 2026 · metrics 1.13.0
Maven · npm
69Moderatehealth index
apache/zookeeper
Apache ZooKeeper
Java★ 12.8KJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
17Criticalhealth index
dotnet/coreclr
CoreCLR is the runtime for .NET Core. It includes the garbage collector, JIT compiler, primitive data types and low-level classes.
Mixed★ 12.8KJul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
Maven
62Moderatehealth index
google/guice
Guice (pronounced 'juice') is a lightweight dependency injection framework for Java 11 and above, brought to you by Google.
Java★ 12.7KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
siteboon/claudecodeui
Use Claude Code, OpenCode, Cursor CLI, and Codex on mobile and web with CloudCLI (aka Claude Code UI). CloudCLI is a free open source webui/GUI that helps you manage your Claude Code session and projects remotely.
TypeScript · JavaScript★ 12.7K↓ 30.1K/moJul 19, 2026
AGPL-3.0Jul 19, 2026 · metrics 1.13.0
npm
56Moderatehealth index
atlassian/pragmatic-drag-and-drop
Fast drag and drop for any experience on any tech stack
TypeScript★ 12.7K↓ 10M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
75Goodhealth index
webpack/webpack-bundle-analyzer
Webpack plugin and CLI utility that represents bundle content as convenient interactive zoomable treemap
JavaScript★ 12.7K↓ 47.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
78Goodhealth index
projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
JavaScript★ 12.7KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven · npm
84Goodhealth index
langchain4j/langchain4j
LangChain4j is an idiomatic, open-source Java library for building LLM-powered applications on the JVM. It offers a unified API over popular LLM providers and vector stores, and makes implementing tool calling (including MCP support), agents and RAG easy. It integrates seamlessly with enterprise Java frameworks like Quarkus and Spring Boot.
Java★ 12.6KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go · PyPI
91Excellenthealth index
Elastic/beats
:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash
Go★ 12.6KJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Maven · npm · Packagist +1
85Excellenthealth index
Automattic/wp-calypso
The JavaScript and API powered WordPress.com
TypeScript · JavaScript★ 12.6KJul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 1.13.0
Packagist · PyPI
73Goodhealth index
ramsey/uuid
:snowflake: A PHP library for generating universally unique identifiers (UUIDs).
PHP★ 12.6K↓ 14.7M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0