Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,785
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,359 recordsRanked by popularity · browse by tag · record statistics
Go
34At Riskhealth index
uber-go/dig
A reflection based dependency injection toolkit for Go.
Go★ 4,499Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
ctran/annotate_models
Annotate Rails classes with schema and routes info
Ruby★ 4,483Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
30At Riskhealth index
jonschlinkert/gray-matter
Smarter YAML front matter parser, used by metalsmith, Gatsby, Netlify, Assemble, mapbox-gl, phenomic, vuejs vitepress, TinaCMS, Shopify Polaris, Ant Design, Astro, hashicorp, garden, slidev, saber, sourcegraph, and many others. Simple to use, and battle tested. Parses YAML by default but can also parse JSON Front Matter, Coffee Front Matter, TOML Front Matter, and has support for custom parsers. Please follow gray-matter's author: https://github.com/jonschlinkert
JavaScript★ 4,483↓ 32.3M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
JonathanSalwan/ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Python★ 4,462Aug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
facebook/prop-types
Runtime type checking for React props and similar objects
JavaScript★ 4,449↓ 398M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
31At Riskhealth index
pieroxy/lz-string
LZ-based compression algorithm for JavaScript
TypeScript · Shell★ 4,426↓ 226M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
matplotlib/mplfinance
Financial Markets Data Visualization using Matplotlib
Python★ 4,422Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
DistrictDataLabs/yellowbrick
Visual analysis and diagnostic tools to facilitate machine learning model selection.
Python★ 4,400Aug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
swimlane/ngx-charts
:bar_chart: Declarative Charting Framework for Angular
TypeScript★ 4,362↓ 1,300/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
26At Riskhealth index
bramstein/fontfaceobserver
Webfont loading. Simple, small, and efficient.
JavaScript★ 4,335↓ 27.5M/moAug 12, 2026
BSD-2-ClauseAug 12, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
PHP★ 4,296↓ 409.1K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
richzhang/PerceptualSimilarity
LPIPS metric. pip install lpips
Python★ 4,267Aug 13, 2026
BSD-2-ClauseAug 13, 2026 · metrics 2.10.0
NuGet
18Criticalhealth index
nefarius/ViGEmBus
Windows kernel-mode driver emulating well-known USB game controllers.
C++★ 4,238Aug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
clean-css/clean-css
Fast and efficient CSS optimizer for node.js and the Web
JavaScript★ 4,197↓ 90M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
powermock/powermock
PowerMock is a Java framework that allows you to unit test code normally regarded as untestable.
Java★ 4,171Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
Go
18Criticalhealth index
google/btree
BTree provides a simple, ordered, in-memory data structure for Go programs.
Go★ 4,163Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · Go · Maven
19Criticalhealth index
bufbuild/protoc-gen-validate
Protocol Buffer Validation - replaced by https://github.com/bufbuild/protovalidate
Go · Java · Starlark★ 4,119↓ 304.2K/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
TypeScript★ 4,116↓ 2.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
19Criticalhealth index
AlecAivazis/survey
A golang library for building interactive and accessible prompts with full support for windows and posix terminals.
Go★ 4,105Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
crates.io
51Moderatehealth index
xacrimon/dashmap
Blazing fast concurrent HashMap for Rust.
Rust★ 4,093↓ 25.1M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
npm
19Criticalhealth index
draft-js-plugins/draft-js-plugins
React Plugin Architecture for Draft.js including Slack-Like Emojis, FB-Like Mentions and Stickers
TypeScript · JavaScript★ 4,090↓ 1.2M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
LaravelCollective/html
HTML and Form Builders for the Laravel Framework
PHP★ 4,081↓ 499.7K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
awesome-print/awesome_print
Pretty print your Ruby objects with style -- in full color and with proper indentation
Ruby★ 4,078Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ts-essentials/ts-essentials
All essential TypeScript types in one place 🤙
TypeScript★ 4,076↓ 22.8M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
speedyapply/JobSpy
Jobs scraper library for LinkedIn, Indeed, Glassdoor, Google, ZipRecruiter & more
Python★ 4,071Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
async-rs/async-std
Async version of the Rust standard library
Rust★ 4,066↓ 3.2M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
rspeer/python-ftfy
Fixes mojibake and other glitches in Unicode text, after the fact.
Python · Jupyter Notebook★ 4,060↓ 16.5M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
NuGet
25At Riskhealth index
mcintyre321/OneOf
Easy to use F#-like ~discriminated~ unions for C# with exhaustive compile time matching
C#★ 4,054Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
fake-useragent/fake-useragent
Up-to-date simple useragent faker with real world database
Python★ 4,049↓ 10.8M/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0