Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
51,940
Monthly downloads under inspection
391B
Median health index
59 Moderate
51,940 recordsRanked by popularity · browse by tag · record statistics
npm · crates.io
80Excellenthealth index
srothgan/claude-code-rust
A native Rust terminal interface for Claude Code
Rust · TypeScript★ 169↓ 1,739/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Go
91Excellenthealth index
step-security/dev-machine-guard
Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.
Go★ 169Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.5.0
crates.io
84Excellenthealth index
tod-org/tod
An unofficial Todoist command line client written in Rust
Rust★ 169↓ 187/moAug 3, 2026
MITAug 3, 2026 · metrics 2.5.0
Go · npm
71Goodhealth index
Effect-TS/tsgo
TypeScript-go enhanced with the Effect LSP experience
Go · TypeScript★ 168Aug 2, 2026
MITAug 2, 2026 · metrics 2.5.0
RubyGems · crates.io
67Goodhealth index
IAPark/tiktoken_ruby
Unofficial ruby binding for tiktoken by way of rust
Ruby · Rust★ 168Jul 19, 2026
MITJul 19, 2026 · metrics 2.5.0
PyPI
75Goodhealth index
OCA/pylint-odoo
Odoo plugin for Pylint
Python★ 168↓ 195.1K/moJul 19, 2026
No licenseJul 19, 2026 · metrics 2.5.0
NuGet
32At Riskhealth index
WildGums/Orc.Controls
Timespan, DateTime and various other controls
C#★ 168Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.5.0
npm
80Excellenthealth index
appium/appium-windows-driver
Appium's interface to WindowsAppDriver provided by Microsoft
TypeScript★ 168↓ 303K/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm · Maven
87Excellenthealth index
appium/io.appium.settings
App for dealing with Android settings
Java · TypeScript★ 168↓ 3.3M/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.5.0
91Excellenthealth index
awslabs/aws-c-s3
C99 library implementation for communicating with the S3 service, designed for maximizing throughput on high bandwidth EC2 instances.
C★ 168Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.5.0
73Goodhealth index
duendesoftware/foss
Duende's Free and Open Source software.
C#★ 168Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.5.0
Go
91Excellenthealth index
dynatrace-oss/dtctl
CLI for managing Dynatrace platform resources - built for humans and AI agents alike
Go★ 168Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.5.0
PyPI
81Excellenthealth index
easybuilders/easybuild-framework
EasyBuild is a software installation framework in Python that allows you to install software in a structured and robust way.
Python★ 168Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 2.5.0
npm
42Weakhealth index
erasureprotocol/erasure-protocol
Information wants to be expensive
JavaScript · Solidity★ 168↓ 21/moJul 15, 2026
MITJul 15, 2026 · metrics 2.5.0
51Moderatehealth index
inaka/shotgun
For the times you need more than just a gun.
Erlang★ 168Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.5.0
npm
87Excellenthealth index
jens-maus/node-ical
Feature-rich iCalendar/ICS (RFC 5545) parser for Node.js with a robust recurrence rule (RRULE) environment
JavaScript★ 168↓ 836.2K/moJul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.5.0
41Weakhealth index
jw3126/Setfield.jl
Update deeply nested immutable structs.
Julia★ 168Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.5.0
PyPI
60Moderatehealth index
jwodder/check-wheel-contents
Check your wheels have the right contents
Python★ 168↓ 436.5K/moJul 18, 2026
MITJul 18, 2026 · metrics 2.5.0
npm · Maven · RubyGems
75Goodhealth index
maitrungduc1410/react-native-video-trim
Video trimmer for React Native App
Swift · Kotlin · TypeScript★ 168↓ 43.6K/moJul 21, 2026
MITJul 21, 2026 · metrics 2.5.0
Packagist
34At Riskhealth index
mariovalney/laravel-keycloak-web-guard
Simple Keycloak Guard to Laravel Web Routes - https://packagist.org/packages/vizir/laravel-keycloak-web-guard
PHP★ 168↓ 17.5K/moJul 21, 2026
No licenseJul 21, 2026 · metrics 2.5.0
crates.io
62Moderatehealth index
mozilla/dump_syms
Rewrite of breakpad dump_syms tools in Rust
Rust★ 168↓ 5,864/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.5.0
Go
77Goodhealth index
openclaw/wacrawl
🧾 WhatsApp archaeology with encrypted receipts
Go · JavaScript★ 168Jul 23, 2026
MITJul 23, 2026 · metrics 2.5.0
crates.io
80Excellenthealth index
rust-cli/anstyle
ANSI text styling
HTML · Rust★ 168Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 2.5.0
NuGet
28At Riskhealth index
samcragg/sharpkml
SharpKML is an implementation of the Open Geospatial Consortium (OGC) KML 2.2 standard developed in C#, able to read/write both KML files and KMZ files.
C#★ 168Jul 18, 2026
MITJul 18, 2026 · metrics 2.5.0
Go
81Excellenthealth index
solo-io/gloo
The Cloud-Native API Gateway and AI Gateway
Go★ 168Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.5.0
Go
93Exceptionalhealth index
spacelift-io/spacectl
Spacelift client and CLI
Go★ 168Jul 21, 2026
MITJul 21, 2026 · metrics 2.5.0
crates.io
73Goodhealth index
sseemayer/keepass-rs
Rust KeePass database file parser for KDB, KDBX3 and KDBX4, with experimental support for KDBX4 writing.
Rust★ 168↓ 8,913/moJul 14, 2026
MITJul 14, 2026 · metrics 2.5.0
npm · Maven · RubyGems
75Goodhealth index
talsec/Free-RASP-ReactNative
React Native plugin for Android and iOS mobile devices. SDK providing app protection and threat monitoring. Shield your app with free RASP. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.
C★ 168↓ 52K/moJul 29, 2026
MITJul 29, 2026 · metrics 2.5.0
Hex
65Goodhealth index
testcontainers/testcontainers-elixir
Testcontainers is an Elixir library that supports ExUnit tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.
Elixir★ 168Jul 17, 2026
MITJul 17, 2026 · metrics 2.5.0