Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,684
Monthly downloads under inspection
381B
Median health index
57 Moderate
17,886 recordsRanked by popularity · browse by tag · record statistics
Packagist · PyPI
65Moderatehealth index
chillerlan/php-qrcode
A PHP QR Code generator and reader with a user-friendly API.
PHP★ 2,376↓ 3M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
JayBizzle/Crawler-Detect
🕷 CrawlerDetect is a PHP class for detecting bots/crawlers/spiders via the user agent
PHP★ 2,374↓ 2.3M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
viest/php-ext-xlswriter
🚀 PHP Extension for creating and reader XLSX files.
C★ 2,374↓ 65/moJul 22, 2026
BSD-2-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
48At riskhealth index
symfony/polyfill-php73
Symfony polyfill backporting some PHP 7.3+ features to lower PHP versions
PHP★ 2,372↓ 6.4M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
50Moderatehealth index
symfony/cache-contracts
Generic abstractions related to caching
PHP★ 2,368↓ 8.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
61Moderatehealth index
symfony/debug-bundle
Provides a tight integration of the Symfony VarDumper component and the ServerLogCommand from MonologBridge into the Symfony full-stack framework
PHP★ 2,364↓ 2.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · PyPI
77Goodhealth index
e2b-dev/code-interpreter
Python & JS/TS SDK for running AI-generated code/code interpreting in your AI app
Python · TypeScript★ 2,361↓ 1.7M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm · crates.io
33At riskhealth index
IrosTheBeggar/mStream
The easiest music streaming server available
JavaScript★ 2,357↓ 387/moJul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
RubyGems
71Goodhealth index
countries/countries
All sorts of useful information about every country packaged as convenient little country objects. It includes data from ISO 3166 (countries and states/subdivisions ), ISO 4217 (currency), and E.164 (phone numbers).
Ruby★ 2,357Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
62Moderatehealth index
broofa/mime
Mime types for JavaScript
TypeScript · JavaScript★ 2,355↓ 561M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
85Excellenthealth index
oras-project/oras
OCI registry client - managing content like artifacts, images, packages
Go★ 2,354Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
67Moderatehealth index
form-data/form-data
A module to create readable `"multipart/form-data"` streams. Can be used to submit forms and file uploads to other web applications.
JavaScript★ 2,353↓ 681M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
82Goodhealth index
tinylibs/tinybench
🔎 A simple, tiny and lightweight benchmarking library!
TypeScript★ 2,350↓ 260M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · PyPI
68Moderatehealth index
smarty-php/smarty
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic.
PHP★ 2,348↓ 909.7K/moJul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
81Goodhealth index
OPCFoundation/UA-.NETStandard
OPC Unified Architecture .NET Standard
C#★ 2,347Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
PyPI · crates.io · npm
55Moderatehealth index
tamasfe/taplo
A TOML toolkit written in Rust
Rust★ 2,338↓ 482.1K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
crates.io
77Goodhealth index
matrix-construct/tuwunel
Official successor to conduwuit
Rust★ 2,335Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
64Moderatehealth index
onury/accesscontrol
Role and Attribute based Access Control for Node.js
TypeScript★ 2,320↓ 335.5K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
57Moderatehealth index
pyusb/pyusb
Easy USB access for Python
Python★ 2,307Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
79Goodhealth index
Perl/perl5
🐪 The Perl programming language
Perl · C★ 2,306Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
crates.io
66Moderatehealth index
gotham-rs/gotham
A flexible web framework that promotes stability, safety, security and speed.
Rust★ 2,306↓ 21.3K/moJul 25, 2026
Custom licenseJul 25, 2026 · metrics 1.13.0
Go · npm
83Goodhealth index
perses/perses
The CNCF sandbox for observability visualisation. Already supports Prometheus, Tempo, Loki and Pyroscope - more data sources to come!
Go · TypeScript★ 2,303Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io · npm
64Moderatehealth index
xintaofei/codeg
Collaborative multi-agent AI coding workspace: aggregate sessions from Claude Code, Codex, OpenCode, Pi, Grok Build, etc. Desktop app, self-hosted server, or Docker.
TypeScript · Rust★ 2,302Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Hex
30At riskhealth index
edgurgel/httpoison
Yet Another HTTP client for Elixir powered by hackney
Elixir★ 2,297↓ 602K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
54Moderatehealth index
staylor/react-helmet-async
Thread-safe Helmet for React 16+ and friends
TypeScript★ 2,296↓ 16.8M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
83Goodhealth index
web-infra-dev/rspress
🦀 A fast Rsbuild-based static site generator.
TypeScript · MDX★ 2,294↓ 882.8K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
83Goodhealth index
microsoft/pxt
Microsoft MakeCode (PXT - Programming eXperience Toolkit)
TypeScript · JavaScript★ 2,291↓ 33.1K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
38At riskhealth index
gotd/td
Telegram client, in Go. (MTProto API)
Go★ 2,288Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
55Moderatehealth index
maaslalani/sheets
Terminal based spreadsheet tool
Go★ 2,288Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
php-fig/event-dispatcher
No repository description published.
PHP★ 2,286↓ 16.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0