Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,443
Monthly downloads under inspection
380B
Median health index
57 Moderate
18,595 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At riskhealth index
jschneier/django-storages
https://django-storages.readthedocs.io/
Python★ 2,956Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
—
74Goodhealth index
Microsoft/wil
Windows Implementation Library
C++★ 2,953Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
crates.io · npm
60Moderatehealth index
nubjs/nub
The fast all-in-one Node.js toolkit
Rust · JavaScript★ 2,951Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
PyPI
62Moderatehealth index
keleshev/schema
Schema validation just got Pythonic
Python★ 2,949Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go · npm
81Goodhealth index
kubernetes-sigs/gateway-api
Repository for the next iteration of composite service (e.g. Ingress) and load balancing APIs.
Go★ 2,946↓ 0/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
NuGet
16Criticalhealth index
TheBerkin/Rant
(Obsolete) Archive of Rant 3.x.
C#★ 2,943Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
crates.io
58Moderatehealth index
abenz1267/walker
Multi-Purpose Launcher with a lot of features. Highly Customizable and fast.
Rust★ 2,942Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Go · npm
72Goodhealth index
kite-org/kite
🪁 A lightweight, modern Kubernetes dashboard that unifies multi-cluster and resource management, enterprise-grade user governance (OAuth, RBAC, and audit logs), and AI agents in one workspace. Not just a tool, but more like a platform.
TypeScript · Go★ 2,935Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
80Goodhealth index
thinkst/opencanary
Modular and decentralised honeypot
Python · CSS★ 2,933↓ 3,082/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
RubyGems
17Criticalhealth index
curtis0x/fake-s3
A lightweight server clone of Amazon S3 that simulates most of the commands supported by S3 with minimal dependencies
Ruby★ 2,928Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Maven
85Excellenthealth index
apache/grails-core
Grails - the Web Application Framework
Groovy · Java★ 2,926Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
kayak/pypika
PyPika is a python SQL query builder that exposes the full richness of the SQL language using a syntax that reflects the resulting query. PyPika excels at all sorts of SQL queries but is especially useful for data analysis.
Python★ 2,926Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
80Goodhealth index
zenstackhq/zenstack
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
TypeScript★ 2,925↓ 1.2M/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
87Excellenthealth index
slackapi/bolt-js
A framework to build Slack apps using JavaScript
TypeScript★ 2,923↓ 13.2M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
67Moderatehealth index
yahoo/serialize-javascript
Serialize JavaScript to a superset of JSON that includes regular expressions and functions.
JavaScript★ 2,921↓ 207M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
66Moderatehealth index
signintech/gopdf
A simple library for generating PDF written in Go lang
Go★ 2,919Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm · Maven · RubyGems
54Moderatehealth index
zmxv/react-native-sound
React Native module for playing sound clips
TypeScript · Kotlin · Objective-C++★ 2,918↓ 490.4K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
46At riskhealth index
rubysherpas/paranoia
acts_as_paranoid for Rails 5, 6 and 7
Ruby★ 2,916Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
77Goodhealth index
symfony/monolog-bundle
Symfony Monolog Bundle
PHP★ 2,916↓ 4.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
55Moderatehealth index
Roave/SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
Mixed★ 2,914↓ 2.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
57Moderatehealth index
ahupp/python-magic
A python wrapper for libmagic
Python★ 2,914Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
56Moderatehealth index
sindresorhus/cli-spinners
Spinners for use in the terminal
JavaScript★ 2,913↓ 279M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
68Moderatehealth index
testdouble/standard
Ruby's bikeshed-proof linter and formatter 🚲
Ruby★ 2,913Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
—
75Goodhealth index
stephenberry/glaze
Extremely fast, in memory, serialization, reflection, and RPC library for C++. JSON, BEVE, BSON, CBOR, CSV, JSONB, MessagePack, TOML, YAML, EETF
C++★ 2,912Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
71Goodhealth index
unjs/jiti
Runtime TypeScript and ESM support for Node.js
TypeScript · JavaScript★ 2,912↓ 706M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
84Goodhealth index
pytorch/ao
PyTorch native quantization and sparsity for training and inference
Python · C++★ 2,909Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
82Goodhealth index
TanStack/ai
🤖 Type-safe, provider-agnostic TypeScript AI SDK for streaming chat, tool calling, agents, and multimodal apps across OpenAI, Anthropic, Gemini, React, Vue, Svelte, and Solid.
TypeScript★ 2,907↓ 613.6K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
62Moderatehealth index
sindresorhus/p-limit
Run multiple promise-returning & async functions with limited concurrency
JavaScript★ 2,905↓ 1.2B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
grantjenks/python-diskcache
Python disk-backed cache (Django-compatible). Faster than Redis and Memcached. Pure-Python.
Python★ 2,898Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0