Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,132
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,964 recordsRanked by popularity · browse by tag · record statistics
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 22.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
54Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11.1K↓ 282M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
fdehau/tui-rs
Build terminal user interfaces and dashboards using Rust
Rust★ 10.9K↓ 114.9K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.9KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 318M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-bakery/nom
Rust parser combinator framework
Rust★ 10.5K↓ 52.2M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Python★ 10.4K↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
34At Riskhealth index
wwmm/easyeffects
Limiter, compressor, convolver, equalizer and auto volume and many other plugins for PipeWire applications
HTML · C++ · QML★ 10.2KSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactjs/react-transition-group
An easy way to perform animations when a React component enters or leaves the DOM
JavaScript★ 10.2K↓ 197M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
pahen/madge
Create graphs from your CommonJS, AMD or ES6 module dependencies
JavaScript★ 10.2K↓ 11.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tweenjs/tween.js
JavaScript/TypeScript animation engine
TypeScript · JavaScript★ 10.1K↓ 36M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
senchalabs/connect
Connect is an extensible HTTP server framework for node using "plugins" known as middleware.
JavaScript★ 9,873↓ 74.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
JavaScript★ 9,839↓ 453M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
pmndrs/use-gesture
👇Bread n butter utility for component-tied mouse/touch gestures in React and Vanilla Javascript.
TypeScript★ 9,621↓ 50M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Oneflow-Inc/oneflow
OneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.
C++ · Python · Cuda★ 9,436Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
swiftmailer/swiftmailer
Comprehensive mailing tools for PHP
PHP★ 9,426↓ 2.1M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
32At Riskhealth index
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
JavaScript★ 9,313↓ 225M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
node-schedule/node-schedule
A cron-like and not-cron-like job scheduler for Node.
JavaScript★ 9,204↓ 15.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
olivernn/lunr.js
A bit like Solr, but much smaller and not as bright
JavaScript★ 9,202↓ 28M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
PHP★ 9,187↓ 237.9K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mrdoob/stats.js
JavaScript Performance Monitor
JavaScript★ 9,151↓ 14.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
57Moderatehealth index
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
JavaScript★ 8,998↓ 13.6M/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
JavaScript★ 8,855↓ 722M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Python★ 8,853Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
anyproto/anytype-ts
Official Anytype client for MacOS, Linux, and Windows
TypeScript★ 8,836Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
eternnoir/pyTelegramBotAPI
Python Telegram bot api.
Python★ 8,779↓ 947.5K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
santinic/audiblez
Generate audiobooks from e-books
Python★ 8,635↓ 1,012/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Hopding/pdf-lib
Create and modify PDF documents in any JavaScript environment
TypeScript★ 8,634↓ 45.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
emilkowalski/vaul
A drawer component for React.
TypeScript★ 8,615↓ 136M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0