Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
41,511
Monthly downloads under inspection
383B
Median health index
57 Moderate
41,511 recordsRanked by popularity · browse by tag · record statistics
NuGet
74Goodhealth index
angularsen/UnitsNet
Makes life working with units of measurement just a little bit better.
C#★ 2,957Jul 17, 2026
MIT-0Jul 17, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
jschneier/django-storages
https://django-storages.readthedocs.io/
Python★ 2,956Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
—
74Goodhealth index
Microsoft/wil
Windows Implementation Library
C++★ 2,953Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
crates.io · npm
60Moderatehealth index
nubjs/nub
The fast all-in-one Node.js toolkit
Rust · JavaScript★ 2,951Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go
77Goodhealth index
buildpack/pack
CLI for building apps using Cloud Native Buildpacks
Go★ 2,949Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
79Goodhealth index
buildpacks/pack
CLI for building apps using Cloud Native Buildpacks
Go★ 2,949Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
PyPI
62Moderatehealth index
keleshev/schema
Schema validation just got Pythonic
Python★ 2,949Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
55Moderatehealth index
101arrowz/fflate
High performance (de)compression in an 8kB package
TypeScript★ 2,947↓ 235M/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go · npm
81Goodhealth index
kubernetes-sigs/gateway-api
Repository for the next iteration of composite service (e.g. Ingress) and load balancing APIs.
Go★ 2,946↓ 0/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
NuGet
16Criticalhealth index
TheBerkin/Rant
(Obsolete) Archive of Rant 3.x.
C#★ 2,943Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
crates.io
58Moderatehealth index
abenz1267/walker
Multi-Purpose Launcher with a lot of features. Highly Customizable and fast.
Rust★ 2,942Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
85Excellenthealth index
projen/projen
Rapidly build modern applications with advanced configuration management
TypeScript★ 2,938↓ 1M/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Go · npm
72Goodhealth index
kite-org/kite
🪁 A lightweight, modern Kubernetes dashboard that unifies multi-cluster and resource management, enterprise-grade user governance (OAuth, RBAC, and audit logs), and AI agents in one workspace. Not just a tool, but more like a platform.
TypeScript · Go★ 2,935Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
80Goodhealth index
thinkst/opencanary
Modular and decentralised honeypot
Python · CSS★ 2,933↓ 3,082/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
RubyGems
17Criticalhealth index
curtis0x/fake-s3
A lightweight server clone of Amazon S3 that simulates most of the commands supported by S3 with minimal dependencies
Ruby★ 2,928Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Maven
85Excellenthealth index
apache/grails-core
Grails - the Web Application Framework
Groovy · Java★ 2,926Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
kayak/pypika
PyPika is a python SQL query builder that exposes the full richness of the SQL language using a syntax that reflects the resulting query. PyPika excels at all sorts of SQL queries but is especially useful for data analysis.
Python★ 2,926Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
80Goodhealth index
zenstackhq/zenstack
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
TypeScript★ 2,925↓ 1.2M/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
76Goodhealth index
naver/egjs-flicking
🎠 ♻️ Everyday 30 million people experience. It's reliable, flexible and extendable carousel.
TypeScript · MDX · CSS★ 2,924↓ 341K/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm
87Excellenthealth index
slackapi/bolt-js
A framework to build Slack apps using JavaScript
TypeScript★ 2,923↓ 13.2M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
67Moderatehealth index
yahoo/serialize-javascript
Serialize JavaScript to a superset of JSON that includes regular expressions and functions.
JavaScript★ 2,921↓ 207M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
66Moderatehealth index
signintech/gopdf
A simple library for generating PDF written in Go lang
Go★ 2,919Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm · Maven · RubyGems
54Moderatehealth index
zmxv/react-native-sound
React Native module for playing sound clips
TypeScript · Kotlin · Objective-C++★ 2,918↓ 490.4K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
57Moderatehealth index
yaml/pyyaml
Canonical source repository for PyYAML
Python · Cython★ 2,917Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
RubyGems
46At riskhealth index
rubysherpas/paranoia
acts_as_paranoid for Rails 5, 6 and 7
Ruby★ 2,916Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
77Goodhealth index
symfony/monolog-bundle
Symfony Monolog Bundle
PHP★ 2,916↓ 4.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
66Moderatehealth index
jpudysz/react-native-unistyles
Level up your React Native StyleSheet
TypeScript · MDX · C++★ 2,915Jul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
Go
74Goodhealth index
roaringbitmap/roaring
Roaring bitmaps in Go (golang), used by InfluxDB, Bleve, DataDog
Go★ 2,915Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
Packagist
55Moderatehealth index
Roave/SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
Mixed★ 2,914↓ 2.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
57Moderatehealth index
ahupp/python-magic
A python wrapper for libmagic
Python★ 2,914Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0