Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,745
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,345 recordsRanked by popularity · browse by tag · record statistics
Go
34At Riskhealth index
google/uuid
Go package for UUIDs based on RFC 4122 and DCE 1.1: Authentication and Security Services.
Go★ 6,142Aug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
npm
55Moderatehealth index
graffle-js/graffle
Simple GraphQL Client for JavaScript. Minimal. Extensible. Type Safe. Runs everywhere.
TypeScript · HTML★ 6,113↓ 19.5K/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
Akegarasu/lora-scripts
SD-Trainer. LoRA & Dreambooth training scripts & GUI use kohya-ss's trainer, for diffusion model.
Python★ 6,110Aug 28, 2026
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
venmo/synx
A command-line tool that reorganizes your Xcode project folder to match your Xcode groups
Ruby★ 6,042Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
32At Riskhealth index
tiny-dnn/tiny-dnn
header only, dependency-free deep learning framework in C++14
C++★ 6,028Aug 17, 2026
Custom licenseAug 17, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
redmine/redmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp
Ruby · HTML★ 6,022Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
26At Riskhealth index
gitbrent/PptxGenJS
Build PowerPoint presentations with JavaScript. Works with Node, React, web browsers, and more.
TypeScript★ 5,987↓ 12.3M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
hartator/wayback-machine-downloader
Download an entire website from the Wayback Machine.
Ruby★ 5,929Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
prettier/eslint-config-prettier
Turns off all rules that are unnecessary or might conflict with Prettier.
JavaScript★ 5,885↓ 249M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
48Weakhealth index
alangpierce/sucrase
Super-fast alternative to Babel for when you can target modern JS runtimes
TypeScript★ 5,872↓ 199M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aiogram/aiogram
aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio
Python★ 5,850↓ 4.4M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
mikaelbr/node-notifier
A Node.js module for sending notifications on native Mac, Windows and Linux (or Growl as fallback)
JavaScript★ 5,845↓ 22.3M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
29At Riskhealth index
mysticatea/npm-run-all
A CLI tool to run multiple npm-scripts in parallel or sequential.
JavaScript★ 5,837↓ 19.3M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Layout-Parser/layout-parser
A Unified Toolkit for Deep Learning Based Document Image Analysis
Python★ 5,771Aug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Go
7Criticalhealth index
disintegration/imaging
Imaging is a simple image processing package for Go
Go★ 5,756Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
vi3k6i5/flashtext
Extract Keywords from sentence or Replace keywords in sentences.
Python★ 5,714↓ 2.5M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
developit/unfetch
🐕 Bare minimum 500b fetch polyfill.
JavaScript · TypeScript★ 5,702↓ 35.9M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
python-openxml/python-docx
Create and modify Word documents with Python
Python★ 5,693↓ 109M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
NuGet · PyPI
34At Riskhealth index
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
C#★ 5,686Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
mislav/will_paginate
Pagination library for Rails and other Ruby applications
Ruby★ 5,684Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
28At Riskhealth index
gogo/protobuf
[Deprecated] Protocol Buffers for Go with Gadgets
Go★ 5,664Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm · Maven
29At Riskhealth index
crazycodeboy/react-native-splash-screen
A splash screen for react-native, hide when application loaded ,it works on iOS and Android.
Java · Objective-C★ 5,658↓ 341.9K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
18Criticalhealth index
assaf/zombie
Insanely fast, full-stack, headless browser testing using node.js
JavaScript★ 5,627↓ 40.3K/moAug 9, 2026
MITAug 9, 2026 · metrics 2.10.0
Go
26At Riskhealth index
russross/blackfriday
Blackfriday: a markdown processor for Go
Go★ 5,606Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
PaulLeCam/react-leaflet
React components for Leaflet maps
TypeScript★ 5,596↓ 28.5M/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
PyPI · RubyGems
34At Riskhealth index
google/clusterfuzz
Scalable fuzzing infrastructure.
Python★ 5,595↓ 6,886/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
31At Riskhealth index
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
JavaScript★ 5,587↓ 130M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
28At Riskhealth index
kelseyhightower/envconfig
Golang library for managing configuration data from environment variables
Go★ 5,464Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
rails-api/active_model_serializers
ActiveModel::Serializer implementation and Rails hooks
Ruby★ 5,341Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0