Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,333
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,933 recordsRanked by popularity · browse by tag · record statistics
Maven
18Criticalhealth index
macrozheng/mall-learning
mall学习教程,架构、业务、技术要点全方位解析。mall项目(60k+star)是一套电商系统,使用现阶段主流技术实现。涵盖了SpringBoot、MyBatis、Elasticsearch、RabbitMQ、Redis、MongoDB、MySQL等技术,采用Docker容器化部署。
Java★ 13.4KAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
npm
66Goodhealth index
graphql/dataloader
DataLoader is a generic utility to be used as part of your application's data fetching layer to provide a consistent API over various backends and reduce requests to those backends via batching and caching.
JavaScript★ 13.4K↓ 49.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mishoo/UglifyJS
JavaScript parser / mangler / compressor / beautifier toolkit
JavaScript★ 13.4K↓ 175M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
28At Riskhealth index
golang/groupcache
groupcache is a caching and cache-filling library, intended as a replacement for memcached in many cases.
Go★ 13.3KOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Maven · PyPI
34At Riskhealth index
CleverRaven/Cataclysm-DDA
Cataclysm - Dark Days Ahead. A turn-based survival game set in a post-apocalyptic world.
C++★ 13.2KSep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytube/pytube
Lightweight, dependency-free Python library and CLI for downloading YouTube videos, playlists, and captions.
Python★ 13.2K↓ 4.3M/moAug 27, 2026
UnlicenseAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
TypeStrong/ts-node
TypeScript execution and REPL for node.js
TypeScript · JavaScript★ 13.1K↓ 183M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
The-PR-Agent/pr-agent
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
Python★ 13.1K↓ 26.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
alibaba/COLA
🥤 COLA: Clean Object-oriented & Layered Architecture
Java★ 13KAug 27, 2026
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
npm
48Weakhealth index
dip/cmdk
Fast, unstyled command menu React component.
TypeScript · SCSS★ 13KSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
—
16Criticalhealth index
dotnet/coreclr
CoreCLR is the runtime for .NET Core. It includes the garbage collector, JIT compiler, primitive data types and low-level classes.
Mixed★ 12.8KAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
asweigart/pyautogui
A cross-platform GUI automation Python module for human beings. Used to programmatically control the mouse & keyboard.
Python★ 12.7K↓ 2.9M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm · Packagist · RubyGems
28At Riskhealth index
twbs/bootstrap-sass
Official Sass port of Bootstrap 2 and 3.
SCSS · JavaScript · Ruby★ 12.5K↓ 1.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go · PyPI
34At Riskhealth index
redpanda-data/redpanda
Redpanda is a streaming data platform for developers. Kafka API compatible. 10x faster. No ZooKeeper. No JVM!
C++ · Python★ 12.5KAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
infracost/infracost
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
Go★ 12.5KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
provectus/kafka-ui
Open-Source Web UI for Apache Kafka Management
Java · TypeScript★ 12.3KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
dbader/schedule
Python job scheduling for humans.
Python★ 12.3K↓ 9.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
atomiks/tippyjs
Tooltip, popover, dropdown, and menu library
JavaScript · TypeScript★ 12.2K↓ 24.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
marcotcr/lime
Lime: Explaining the predictions of any machine learning classifier
JavaScript · Python★ 12.2K↓ 452.5K/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
listen1/listen1_chrome_extension
one for all free music in china (chrome extension, also works for firefox)
JavaScript · HTML · CSS★ 12.1KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
tadata-org/fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Python★ 12K↓ 17M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
karma-runner/karma
Spectacular Test Runner for JavaScript
JavaScript★ 12K↓ 12.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
developit/mitt
🥊 Tiny 200 byte functional event emitter / pubsub.
TypeScript★ 11.9K↓ 118M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
tj/co
The ultimate generator based flow-control goodness for nodejs (supports thunks, promises, etc)
JavaScript★ 11.8K↓ 161M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
Nozbe/WatermelonDB
🍉 Reactive & asynchronous database for powerful React and React Native apps ⚡️
JavaScript · Objective-C★ 11.8K↓ 226.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
38Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 352K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
code4craft/webmagic
A scalable web crawler framework for Java.
Java · HTML★ 11.7KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
egulias/EmailValidator
PHP Email address validator
PHP★ 11.6K↓ 16.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
ssssssss-team/spider-flow
新一代爬虫平台,以图形化方式定义爬虫流程,不写代码即可完成爬虫。
Java★ 11.4KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0