Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,716
Monthly downloads under inspection
381B
Median health index
57 Moderate
38,716 recordsRanked by popularity · browse by tag · record statistics
crates.io
80Goodhealth index
huggingface/tokenizers
💥 Fast State-of-the-Art Tokenizers optimized for Research and Production
Rust · Python★ 10.9K↓ 2.9M/moJul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
PyPI
84Goodhealth index
triton-inference-server/server
The Triton Inference Server provides an optimized cloud and edge inferencing solution.
Python · Shell · C++★ 10.9KJul 19, 2026
BSD-3-ClauseJul 19, 2026 · metrics 1.13.0
PyPI
82Goodhealth index
Kludex/uvicorn
An ASGI web server, for Python. 🦄
Python★ 10.8K↓ 537M/moJul 16, 2026
BSD-3-ClauseJul 16, 2026 · metrics 1.13.0
PyPI
80Goodhealth index
encode/uvicorn
An ASGI web server, for Python. 🦄
Python★ 10.8KJul 15, 2026
BSD-3-ClauseJul 15, 2026 · metrics 1.13.0
Packagist
82Goodhealth index
phalcon/cphalcon
High performance, full-stack PHP framework delivered as a C extension.
PHP★ 10.8K↓ 2,067/moJul 14, 2026
BSD-3-ClauseJul 14, 2026 · metrics 1.13.0
Maven
48At riskhealth index
TooTallNate/Java-WebSocket
A barebones WebSocket client and server implementation written in 100% Java.
Java · HTML★ 10.8KJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
80Goodhealth index
dotnet/orleans
Cloud Native application framework for .NET
C#★ 10.8KJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go
49At riskhealth index
siderolabs/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
Go★ 10.8KJul 21, 2026
MPL-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
80Goodhealth index
cython/cython
The most widely used Python to C compiler
Cython · Python★ 10.8KJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Maven
45At riskhealth index
zfile-dev/zfile
在线云盘、网盘、OneDrive、云存储、私有云、对象存储、h5ai、上传、下载
Java★ 10.8KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
82Goodhealth index
TALOS-SYSTEMS/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
Go★ 10.8KJul 18, 2026
MPL-2.0Jul 18, 2026 · metrics 1.13.0
npm · PyPI
77Goodhealth index
bunkerity/bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Python · Shell · HTML★ 10.7KJul 24, 2026
AGPL-3.0Jul 24, 2026 · metrics 1.13.0
npm
67Moderatehealth index
josStorer/chatGPTBox
Integrating ChatGPT into your browser deeply, everything you need is here
JavaScript★ 10.7KJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist · PyPI
65Moderatehealth index
mockery/mockery
Mockery is a simple yet flexible PHP mock object framework for use in unit testing with PHPUnit, PHPSpec or any other testing framework. Its core goal is to offer a test double framework with a succinct API capable of clearly defining all possible object operations and interactions using a human readable Domain Specific Language (DSL).
PHP★ 10.7K↓ 10.3M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
crates.io
34At riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.7K↓ 233M/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
29Criticalhealth index
evilpacket/helmet
Help secure Express apps with various HTTP headers
TypeScript★ 10.7KJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
npm
32At riskhealth index
helmetjs/helmet
Help secure Express apps with various HTTP headers
TypeScript★ 10.7K↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
Maven
72Goodhealth index
microsoft/fluentui-system-icons
Fluent System Icons are a collection of familiar, friendly and modern icons from Microsoft.
HTML · Dart · Swift★ 10.7KJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm · PyPI
84Goodhealth index
nodejs/node-gyp
Node.js native addon build tool
Python · JavaScript★ 10.7K↓ 205M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
81Goodhealth index
rq/rq
Simple job queues for Python
Python★ 10.7K↓ 7.8M/moJul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
npm · Go
73Goodhealth index
alibaba/open-code-review
Open-source & free — Battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in fine-tuned ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
Go · TypeScript★ 10.7K↓ 59.9K/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
79Goodhealth index
benoitc/gunicorn
gunicorn 'Green Unicorn' is a WSGI HTTP Server for UNIX, fast clients and sleepy applications.
Python★ 10.6K↓ 125M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Maven
69Moderatehealth index
signalapp/Signal-Server
Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS
Java★ 10.6KJul 18, 2026
AGPL-3.0Jul 18, 2026 · metrics 1.13.0
PyPI · npm
89Excellenthealth index
Arize-ai/phoenix
AI Observability & Evaluation
Python · TypeScript · Jupyter Notebook★ 10.6KJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
npm
73Goodhealth index
protobufjs/protobuf.js
Protocol Buffers for JavaScript and TypeScript. Very fast, fully conformant, and unusually versatile. No protoc required.
JavaScript★ 10.6K↓ 298M/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Maven
76Goodhealth index
google/auto
A collection of source code generators for Java.
Java★ 10.6KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
63Moderatehealth index
jsvine/pdfplumber
Plumb a PDF for detailed information about each char, rectangle, line, et cetera — and easily extract text and tables.
Python★ 10.6KJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI
63Moderatehealth index
amueller/word_cloud
A little word cloud generator in Python
Python★ 10.5KJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
82Goodhealth index
autogluon/autogluon
Fast and Accurate ML in 3 Lines of Code
Python★ 10.5K↓ 1.9M/moJul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
Maven
87Excellenthealth index
Activiti/Activiti
Activiti is a light-weight workflow and Business Process Management (BPM) Platform targeted at business people, developers and system admins. Its core is a super-fast and rock-solid BPMN 2 process engine for Java. It's open-source and distributed under the Apache license. Activiti runs in any Java application, on a server, on a cluster or in the cloud. It integrates perfectly with Spring, it is extremely lightweight and based on simple concepts.
Java★ 10.5KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0