Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
39,009
Monthly downloads under inspection
382B
Median health index
57 Moderate
39,009 recordsRanked by popularity · browse by tag · record statistics
npm
51Moderatehealth index
goofychris/art-template
High performance JavaScript templating engine
JavaScript★ 9,855↓ 135.7K/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Packagist
73Goodhealth index
bobthecow/psysh
A REPL for PHP
PHP★ 9,830↓ 12.1M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
npm · RubyGems
77Goodhealth index
Freika/dawarich
Your favorite self-hostable alternative to Google Timeline (Google Location History)
Ruby · JavaScript★ 9,821Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
PyPI · crates.io · npm
80Goodhealth index
sqlfluff/sqlfluff
A modular SQL linter and auto-formatter with support for multiple dialects and templated code.
Python · SQL · Rust★ 9,819Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
28Criticalhealth index
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
JavaScript★ 9,817↓ 442M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
68Moderatehealth index
symfony/console
Eases the creation of beautiful and testable command line interfaces
PHP★ 9,816↓ 17.9M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
60Moderatehealth index
MahApps/MahApps.Metro
A framework that allows developers to cobble together a better UI for their own WPF applications with minimal effort.
C#★ 9,809Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
PyPI
59Moderatehealth index
paramiko/paramiko
The leading native Python SSHv2 protocol library.
Python★ 9,808Jul 21, 2026
LGPL-2.1Jul 21, 2026 · metrics 1.13.0
Packagist
64Moderatehealth index
firebase/php-jwt
PHP package for JWT
PHP★ 9,806Jul 16, 2026
BSD-3-ClauseJul 16, 2026 · metrics 1.13.0
Packagist
66Moderatehealth index
googleapis/php-jwt
PHP package for JWT
PHP★ 9,804↓ 11.6M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
71Goodhealth index
googleapis/google-api-php-client
A PHP client library for accessing Google APIs
PHP★ 9,798↓ 4.6M/moJul 13, 2026
Apache-2.0Jul 13, 2026 · metrics 1.13.0
crates.io
77Goodhealth index
SeaQL/sea-orm
🐚 A powerful relational ORM for Rust
Rust★ 9,796↓ 3.7M/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm · crates.io
75Goodhealth index
dmtrKovalenko/fff
The fastest and the most accurate file search SDK for AI agents, Neovim, Rust, C, Python, Bun and NodeJS
Rust · Lua · TypeScript★ 9,796↓ 215.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Maven
78Goodhealth index
OpenFeign/feign
Feign makes writing java http clients easier
Java★ 9,793Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
82Goodhealth index
falconry/falcon
The no-magic web API and microservices framework for Python developers, with a focus on reliability and performance at scale.
Python★ 9,792↓ 1.6M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
87Excellenthealth index
huggingface/accelerate
🚀 A simple way to launch, train, and use PyTorch models on almost any device and distributed configuration, automatic mixed precision (including fp8), and easy-to-configure FSDP and DeepSpeed support
Python★ 9,780Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
72Goodhealth index
Humanizr/Humanizer
Humanizer meets all your .NET needs for manipulating and displaying strings, enums, dates, times, timespans, numbers and quantities
C#★ 9,772Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go
36At riskhealth index
gorse-io/gorse
AI powered open source recommender system engine supports classical/LLM rankers and multimodal content via embedding
Go · Assembly★ 9,761Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io
50Moderatehealth index
phiresky/ripgrep_all
rga: ripgrep, but also search in PDFs, E-Books, Office documents, zip, tar.gz, etc.
Rust★ 9,748Jul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
npm
65Moderatehealth index
sindresorhus/ora
Elegant terminal spinner
JavaScript★ 9,728↓ 315M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
48At riskhealth index
bchavez/Bogus
:card_index: A simple fake data generator for C#, F#, and VB.NET. Based on and ported from the famed faker.js.
C#★ 9,717Jul 16, 2026
Custom licenseJul 16, 2026 · metrics 1.13.0
npm · Go
86Excellenthealth index
gruntwork-io/terragrunt
Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu/Terraform to scale.
Go★ 9,717↓ 3,981/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
76Goodhealth index
SpiderLabs/ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
C++★ 9,712Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm · RubyGems
86Excellenthealth index
activeadmin/activeadmin
The administration framework for Ruby on Rails applications.
Ruby · Gherkin★ 9,704↓ 360.1K/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist
84Goodhealth index
doctrine/dbal
Doctrine Database Abstraction Layer
PHP★ 9,704↓ 9.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
22Criticalhealth index
lihengming/spring-boot-api-project-seed
:seedling::rocket:一个基于Spring Boot & MyBatis的种子项目,用于快速构建中小型API、RESTful API项目~
Java · FreeMarker★ 9,700Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
81Goodhealth index
hyperdxio/hyperdx
Resolve production issues, fast. An open source observability platform unifying session replays, logs, metrics, traces and errors powered by ClickHouse and OpenTelemetry.
TypeScript★ 9,693↓ 48.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
PyPI · npm
86Excellenthealth index
OpenCTI-Platform/opencti
Open Cyber Threat Intelligence Platform
TypeScript · JavaScript★ 9,686Jul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
RubyGems
74Goodhealth index
wpscanteam/wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
Ruby★ 9,684Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
PyPI
44At riskhealth index
pymc-devs/pymc
Bayesian Modeling and Probabilistic Programming in Python
Python★ 9,679Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0