Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,555
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,381 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
vuejs/vue
This is the repo for Vue 2. For Vue 3, go to https://github.com/vuejs/core
TypeScript★ 210.2K↓ 10.8M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
62Moderatehealth index
ytdl-org/youtube-dl
Command-line program to download videos from YouTube.com and other video sites
Python★ 140.9KAug 4, 2026
UnlicenseAug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
godotengine/godot
Godot Engine – Multi-platform 2D and 3D game engine
C++★ 115.1KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
react/create-react-app
Set up a modern web app by running one command.
JavaScript★ 103.3KAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nvbn/thefuck
Magnificent app which corrects your previous console command.
Python★ 97.6KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm · crates.io
19Criticalhealth index
oven-sh/bun
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
Rust · C++★ 95.3K↓ 17.3K/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
facebook/docusaurus
Easy to maintain open source documentation websites.
TypeScript★ 65.8K↓ 33.2M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
localstack/localstack
💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline
Python★ 65.1KAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/scrapy
Scrapy, a fast high-level web crawling & scraping framework for Python.
Python★ 63.8KAug 12, 2026
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
lodash/lodash
A modern JavaScript utility library delivering modularity, performance, & extras.
JavaScript★ 61.3KAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
25At Riskhealth index
adam-p/markdown-here
Google Chrome, Firefox, and Thunderbird extension that lets you write email in Markdown and render it before sending.
JavaScript · CSS★ 60.2KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
28At Riskhealth index
FiloSottile/mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
Go★ 59.5KAug 29, 2026
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
soimort/you-get
:arrow_double_down: Dumb downloader that scrapes the web
Python★ 56.9KAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
TryGhost/Ghost
Independent technology for modern publishing, memberships, subscriptions and newsletters.
JavaScript · TypeScript★ 54.7K↓ 269.9K/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
31At Riskhealth index
wagoodman/dive
A tool for exploring each layer in a docker image
Go★ 54.5KAug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
crates.io · npm
23At Riskhealth index
lencx/ChatGPT
❄️ ChatGPT Desktop Application (Mac, Windows and Linux)
Rust · TypeScript★ 54.4K↓ 8/moAug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
maybe-finance/maybe
The personal finance app for everyone
Ruby · HTML★ 54.4KAug 4, 2026
AGPL-3.0Aug 4, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/kotlin
The Kotlin Programming Language.
Kotlin★ 53.3KAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
agalwood/Motrix
A full-featured download manager.
JavaScript · Vue★ 52.4KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm · Packagist
27At Riskhealth index
Semantic-Org/Semantic-UI
Semantic is a UI component framework based around useful principles from natural language.
JavaScript · Less★ 51K↓ 11.6K/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
slab/quill
Quill is a modern WYSIWYG editor built for compatibility and extensibility
TypeScript · MDX★ 47.3K↓ 39.9M/moAug 12, 2026
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
Go
34At Riskhealth index
v2ray/v2ray-core
A platform for building proxies to bypass network restrictions.
Go★ 46.9KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm · crates.io · PyPI
19Criticalhealth index
janhq/jan
Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.
TypeScript · Rust★ 44.4KSep 6, 2026
Custom licenseSep 6, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
MHSanaei/3x-ui
Xray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto)
Go · TypeScript★ 44.2KAug 5, 2026
GPL-3.0Aug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nolimits4web/swiper
Most modern mobile touch slider with hardware accelerated transitions
TypeScript · JavaScript★ 41.9K↓ 17.1M/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
19Criticalhealth index
yarnpkg/yarn
The 1.x line is frozen - features and bugfixes now happen on https://github.com/yarnpkg/berry
JavaScript★ 41.5K↓ 39.2M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
kilimchoi/engineering-blogs
A curated list of engineering blogs
Ruby★ 38.5KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
httpie/cli
🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.
Python★ 38.4KAug 12, 2026
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
TencentARC/GFPGAN
GFPGAN aims at developing Practical Algorithms for Real-world Face Restoration.
Python★ 37.7K↓ 266.7K/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0