Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
39,946
Monthly downloads under inspection
382B
Median health index
57 Moderate
16,627 recordsRanked by popularity · browse by tag · record statistics
PyPI
77Goodhealth index
airspeed-velocity/asv
Airspeed Velocity: A simple Python benchmarking tool with web-based reporting
Python · JavaScript★ 1,008↓ 508.4K/moJul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
PyPI
65Moderatehealth index
graspologic-org/graspologic
Python package for graph statistics
Python★ 1,008↓ 136.5K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
RubyGems
40At riskhealth index
brunofacca/active-record-query-trace
Rails plugin that logs/displays a backtrace of all SQL queries executed by Active Record
Ruby★ 1,007Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
66Moderatehealth index
nartc/mapper
🔥 An Object-Object AutoMapper for TypeScript 🔥
TypeScript · MDX★ 1,006Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
19Criticalhealth index
RuihengZhang/IFSOD-dataset
Dataset approched by A Benchmark and Frequency Compression Method for Infrared Few-Shot Object Detection
Mixed★ 1,005Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
Packagist
74Goodhealth index
maglnet/ComposerRequireChecker
A CLI tool to check whether a specific composer package uses imported symbols that aren't part of its direct composer dependencies
PHP★ 1,005↓ 550.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
62Moderatehealth index
SmileLikeYe/agent-chief
Attention is your scarcest resource. Chief is the local-first layer that guards it — turning every agent, alert, and feed into one honest call: interrupt, or not.
Python★ 1,003↓ 421/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
83Goodhealth index
gophercloud/gophercloud
Gophercloud: an OpenStack SDK for Go
Go★ 1,002Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
Go · npm
77Goodhealth index
k8up-io/k8up
Kubernetes and OpenShift Backup Operator
Go★ 1,001Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
—
54Moderatehealth index
jdhitsolutions/PSScriptTools
:wrench: :hammer: A set of PowerShell functions to enhance your functions and scripts or to facilitate working in the console. Most should work cross-platform and cross-version. Operating system limitations are handled on a per command basis. The Samples folder contains demonstration scripts.
PowerShell★ 1,000Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
tophant-ai/aibeat
Break your AI before they do.
MDX★ 998Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
RubyGems
70Goodhealth index
flavorjones/loofah
Ruby library for HTML/XML transformation and sanitization
Ruby · HTML★ 997Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
64Moderatehealth index
nashaofu/xcap
XCap is a cross-platform screen capture library written in Rust. It supports Linux (X11, Wayland), MacOS, and Windows. XCap supports screenshot and video recording (WIP).
Rust★ 997↓ 192K/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Go · Maven · npm
81Goodhealth index
AthenZ/athenz
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.
Java · JavaScript★ 996Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
—
23Criticalhealth index
zblcving9-gif/xianxia-AI-town-AI-
大模型驱动的npc决策，npc和玩家平权
JavaScript · HTML★ 996Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
69Moderatehealth index
jazzband/geojson
Python bindings and utilities for GeoJSON
Python★ 994Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
npm
75Goodhealth index
mattiasw/ExifReader
A JavaScript Exif info parser.
JavaScript★ 992↓ 854.9K/moJul 23, 2026
MPL-2.0Jul 23, 2026 · metrics 1.13.0
RubyGems · crates.io
63Moderatehealth index
ankane/ruby-polars
Blazingly fast DataFrames for Ruby
Ruby · Rust★ 991Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
RubyGems
41At riskhealth index
alexch/rerun
Restarts an app when the filesystem changes. Uses growl and FSEventStream if on OS X.
Ruby★ 990Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
RubyGems
83Goodhealth index
getsentry/sentry-ruby
Sentry SDK for Ruby
Ruby★ 990Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
56Moderatehealth index
eyalz800/zpp_bits
A lightweight C++20 serialization and RPC library
C++★ 989Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
65Moderatehealth index
github/codeql-cli-binaries
Binaries for the CodeQL CLI
Mixed★ 989Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Maven
83Goodhealth index
stripe/stripe-java
Java library for the Stripe API.
Java★ 989Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
68Moderatehealth index
actions/attest-build-provenance
Action for generating build provenance attestations for workflow artifacts
Mixed★ 988Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
79Goodhealth index
gcovr/gcovr
Generate code coverage reports with gcc/gcov
Python★ 988↓ 4.1M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
74Goodhealth index
generaltranslation/gt
Full-stack localization for every framework
TypeScript★ 988↓ 912.8K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
—
71Goodhealth index
openconfig/public
Repository for publishing OpenConfig models, documentation, and other material for the community.
Shell★ 987Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
RubyGems
52Moderatehealth index
RubyCrypto/rbnacl
Ruby FFI binding to the Networking and Cryptography (NaCl) library (a.k.a. libsodium)
Ruby★ 985Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
25Criticalhealth index
rsl/stringex
Some [hopefully] useful extensions to Ruby’s String class. It is made up of three libraries: ActsAsUrl [permalink solution with better character translation], Unidecoder [Unicode to Ascii transliteration], and StringExtensions [miscellaneous helper methods for the String class].
Ruby★ 984Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0