Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
39,550
Monthly downloads under inspection
382B
Median health index
57 Moderate
16,738 recordsRanked by popularity · browse by tag · record statistics
Go · npm
71Goodhealth index
specstoryai/getspecstory
Install our local first extensions for your favorite AI IDE or Terminal Agent. Process your histories into reusable skills with Lore. Sync your conversations to the cloud. File issues and requests.
Go★ 1,289Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Go
76Goodhealth index
firebase/firebase-admin-go
Firebase Admin Go SDK
Go★ 1,288Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
PyPI
75Goodhealth index
pushingkarmaorg/python-plexapi
Python bindings for the Plex API.
Python★ 1,288↓ 366.9K/moJul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
—
73Goodhealth index
r-lib/lintr
Static Code Analysis for R
R★ 1,288Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
npm · Go
66Moderatehealth index
xdevplatform/xurl
The official CLI for the X API
Go★ 1,286↓ 44.7K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
62Moderatehealth index
anypost/emailmd
Render markdown into email-safe HTML
TypeScript · MDX★ 1,285↓ 18K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
RubyGems
63Moderatehealth index
freerange/mocha
A mocking and stubbing library for Ruby
Ruby★ 1,285Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
59Moderatehealth index
reactphp/socket
Async, streaming plaintext TCP/IP and secure TLS socket server and client connections for ReactPHP.
PHP★ 1,285↓ 6.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
42At riskhealth index
fazibear/colorize
Ruby string class extension. It add some methods to set color, background color and text effect on console easier using ANSI escape sequences.
Ruby★ 1,284Jul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
71Goodhealth index
jpype-project/jpype
JPype is cross language bridge to allow Python programs full access to Java class libraries.
Python · C++ · Java★ 1,284Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
71Goodhealth index
octokit/core.js
Extendable client for GitHub's REST & GraphQL APIs
TypeScript★ 1,283↓ 143M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
72Goodhealth index
techniq/layerchart
Composable Svelte chart components to build a large variety of visualizations
TypeScript · Svelte★ 1,282↓ 644.4K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Packagist
71Goodhealth index
laravel/vat-calculator
Handle all the hard stuff related to EU MOSS tax/vat regulations, the way it should be.
PHP★ 1,281↓ 98.5K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
34At riskhealth index
micromatch/picomatch
Blazing fast and accurate glob matcher written JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions. Used by GraphQL, Jest, Astro, Snowpack, Storybook, bulma, Serverless, fdir, Netlify, AWS Amplify, Revogrid, rollup, routify, open-wc, imba, ava, docusaurus, fast-glob, globby, chokidar, anymatch, cloudflare/miniflare, pts, and more than 5 million projects! Please follow picomatch's author: https://github.com/jonschlinkert
JavaScript★ 1,280↓ 1.7B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
oasdiff/oasdiff
OpenAPI Diff and Breaking Changes
Go★ 1,279Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
70Goodhealth index
microsoft/griffel
CSS-in-JS with ahead-of-time compilation ⚡️
TypeScript★ 1,278Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
68Moderatehealth index
atomicojs/atomico
Atomico a micro-library for creating webcomponents using only functions, hooks and virtual-dom.
TypeScript · JavaScript★ 1,277↓ 136.3K/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Nyholm/psr7
A super lightweight PSR-7 implementation
PHP★ 1,276↓ 8.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
76Goodhealth index
BoboTiG/python-mss
An ultra fast cross-platform multiple screenshots module in pure Python using ctypes.
Python★ 1,275Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
Anorov/PySocks
A SOCKS proxy client and wrapper for Python.
Python★ 1,274Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
72Goodhealth index
eventlet/eventlet
Concurrent networking library for Python
Python★ 1,274Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
RubyGems
47At riskhealth index
davetron5000/gli
Make awesome command-line applications the easy way
Ruby★ 1,273Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Maven
69Moderatehealth index
LINBIT/linstor-server
High Performance Software-Defined Block Storage for container, cloud and virtualisation. Fully integrated with Docker, Kubernetes, Openstack, Proxmox etc.
Java★ 1,270Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
crates.io
55Moderatehealth index
BurntSushi/aho-corasick
A fast implementation of Aho-Corasick in Rust.
Rust★ 1,269↓ 67.3M/moJul 22, 2026
UnlicenseJul 22, 2026 · metrics 1.13.0
—
51Moderatehealth index
boost-ext/di
C++14 Dependency Injection library
C++★ 1,268Jul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
crates.io · RubyGems · npm
76Goodhealth index
marcoroth/herb
🌿 Powerful and seamless HTML-aware ERB toolchain.
TypeScript · C · Ruby★ 1,268↓ 51/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven
84Goodhealth index
hibernate/hibernate-validator
Hibernate Validator - Jakarta Validation Reference Implementation
Java★ 1,267Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
75Goodhealth index
CyberStrikeus/CyberStrike
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
TypeScript · Python★ 1,266↓ 2,624/moJul 23, 2026
AGPL-3.0Jul 23, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
laradumps/laradumps
🛻 LaraDumps is a friendly app designed to boost your Laravel PHP coding and debugging experience.
PHP★ 1,266↓ 108K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
61Moderatehealth index
simi/omniauth-facebook
Facebook OAuth2 Strategy for OmniAuth
Ruby★ 1,265Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0