Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,787
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,355 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
floating-ui/react-popper
🍿⚛Official React library to use Popper, the positioning library
JavaScript · TypeScript★ 2,488Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
18Criticalhealth index
teampoltergeist/poltergeist
A PhantomJS driver for Capybara
Ruby · JavaScript · CoffeeScript★ 2,486Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
saffsd/langid.py
Stand-alone language identification system
Python★ 2,464↓ 621K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
mohebifar/react-native-copilot
Step-by-step walkthrough tooltip for your react native app
TypeScript · JavaScript★ 2,439↓ 63.8K/moAug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
Go
26At Riskhealth index
GeertJohan/go.rice
go.rice is a Go package that makes working with resources such as html,js,css,images,templates, etc very easy.
Go★ 2,438Aug 30, 2026
BSD-2-ClauseAug 30, 2026 · metrics 2.10.0
npm
23At Riskhealth index
ciaranj/node-oauth
OAuth wrapper for node.js
JavaScript★ 2,435↓ 24.1M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
reiinakano/scikit-plot
An intuitive library to add plotting functionality to scikit-learn objects.
Python★ 2,434↓ 468.3K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
20At Riskhealth index
yuru7/HackGen
Hack と源柔ゴシックを合成したプログラミングフォント 白源 (はくげん/HackGen)
Shell★ 2,427Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
jameslyons/python_speech_features
This library provides common speech features for ASR including MFCCs and filterbank energies.
Python★ 2,423↓ 104.5K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
50Moderatehealth index
yomotsu/camera-controls
A camera control for three.js, similar to THREE.OrbitControls yet supports smooth transitions and more features.
TypeScript★ 2,423↓ 15.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
23At Riskhealth index
php-pds/skeleton
Standard PHP package skeleton.
PHP★ 2,419↓ 15.7K/moAug 4, 2026
CC-BY-SA-4.0Aug 4, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
premailer/premailer
Preflight for HTML email
Ruby★ 2,415Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Andarist/react-textarea-autosize
<textarea /> component for React which grows with content
TypeScript★ 2,411↓ 34.3M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
26At Riskhealth index
coopernurse/node-pool
Generic resource pooling for node.js
JavaScript★ 2,408↓ 45.3M/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
blakeembrey/change-case
Convert strings between camelCase, PascalCase, Capital Case, snake_case and more
TypeScript★ 2,406↓ 245M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
34At Riskhealth index
Kong/kubernetes-ingress-controller
:gorilla: Kong for Kubernetes: The official Ingress Controller for Kubernetes.
Go★ 2,404Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
PyPI
62Moderatehealth index
xhtml2pdf/xhtml2pdf
A library for converting HTML into PDFs using ReportLab
Python · HTML★ 2,389↓ 4.2M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
29At Riskhealth index
OneGet/oneget
PackageManagement (aka OneGet) is a package manager for Windows
C# · PowerShell★ 2,384Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
NuGet
14Criticalhealth index
neuecc/Utf8Json
Definitely Fastest and Zero Allocation JSON Serializer for C#(NET, .NET Core, Unity, Xamarin).
C#★ 2,384Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
30At Riskhealth index
node-cache/node-cache
a node internal (in-memory) caching module
CoffeeScript★ 2,372↓ 21.1M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
JelteF/PyLaTeX
A Python library for creating LaTeX files
Python★ 2,355Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
ethereum/py-evm
A Python implementation of the Ethereum Virtual Machine
Python★ 2,353Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
sebastianbergmann/phploc
A tool for quickly measuring the size of a PHP project.
PHP★ 2,343↓ 98.3K/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
Go
65Goodhealth index
hashicorp/go-retryablehttp
Retryable HTTP client in Go
Go★ 2,340Jul 28, 2026
MPL-2.0Jul 28, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
langchain-ai/langserve
LangServe 🦜️🏓
JavaScript · Python · TypeScript★ 2,330Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
google/generative-ai-python
This SDK is now deprecated, use the new unified Google GenAI SDK.
Python★ 2,326Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
RubyGems
48Weakhealth index
que-rb/que
A Ruby job queue that uses PostgreSQL's advisory locks for speed and reliability.
Ruby★ 2,322Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nschloe/meshio
:spider_web: input/output for many mesh formats
Python★ 2,313Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Go
26At Riskhealth index
chzyer/readline
Readline is a pure go(golang) implementation for GNU-Readline kind library
Go★ 2,310Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Maven
42Weakhealth index
HdrHistogram/HdrHistogram
A High Dynamic Range (HDR) Histogram
Java★ 2,307Jul 30, 2026
Custom licenseJul 30, 2026 · metrics 2.10.0