Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,777
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,401 recordsRanked by popularity · browse by tag · record statistics
Go
23At Riskhealth index
tj/mmake
Modern Make
Go★ 1,737Aug 18, 2026
No licenseAug 18, 2026 · metrics 2.10.0
Go
18Criticalhealth index
mitchellh/cli
A Go library for implementing command-line interfaces.
Go★ 1,735Aug 29, 2026
MPL-2.0Aug 29, 2026 · metrics 2.10.0
npm
29At Riskhealth index
lukeed/klona
A tiny (240B to 501B) and fast utility to "deep clone" Objects, Arrays, Dates, RegExps, and more!
JavaScript★ 1,731↓ 57.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
grafana-cold-storage/agent
Vendor-neutral programmable observability pipelines.
Go★ 1,727Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
google-research/torchsde
Differentiable SDE solvers with GPU support and efficient sensitivity analysis.
Python★ 1,726↓ 1.9M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
rspeer/wordfreq
Access a database of word frequencies, in various natural languages.
Python★ 1,726Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
16Criticalhealth index
eykrehbein/strest
⚡️ CI-ready tests for REST APIs configured in YAML
TypeScript★ 1,721↓ 73/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
octo-models/octo
Octo is a transformer-based robot policy trained on a diverse mix of 800k robot trajectories.
Python★ 1,721Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
phosphor-icons/react
A flexible icon family for React
TypeScript★ 1,718↓ 11.3M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
51Moderatehealth index
jldbc/pybaseball
Pull current and historical baseball statistics using Python (Statcast, Baseball Reference, FanGraphs)
Python★ 1,717↓ 273K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
nickstenning/honcho
Honcho: a python clone of Foreman. For managing Procfile-based applications.
Python★ 1,712↓ 2.2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
tomerfiliba-org/rpyc
RPyC (Remote Python Call) - A transparent and symmetric RPC library for python
Python★ 1,705↓ 1.3M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
37Weakhealth index
crcn/sift.js
Use Mongodb queries in JavaScript
JavaScript · TypeScript★ 1,701↓ 26M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/kleur
The fastest Node.js library for formatting terminal text with ANSI colors~!
JavaScript · Shell★ 1,696↓ 347M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
31At Riskhealth index
lquixada/cross-fetch
Universal WHATWG Fetch API for Node, Browsers and React Native.
JavaScript · TypeScript★ 1,695↓ 142M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
29At Riskhealth index
unitycontainer/unity
This repository contains all relevant information about Unity Container suit
Mixed★ 1,695Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
dropbox/PyHive
Python interface to Hive and Presto. 🐝
Python★ 1,694↓ 6.5M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
influxdata/influxdb-python
Python client for InfluxDB
Python★ 1,691Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
igrigorik/em-websocket
EventMachine based WebSocket server
Ruby★ 1,690Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
26At Riskhealth index
mathiasbynens/punycode.js
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891.
JavaScript★ 1,687↓ 842M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
12Criticalhealth index
bezzad/Downloader
Fast, cross-platform and reliable multipart downloader with asynchronous progress events for .NET applications.
C#★ 1,685Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
rustedpy/result
NOT MAINTAINED - A simple Rust like Result type for Python 3. Fully type annotated.
Python★ 1,680↓ 2.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
atlassian-api/atlassian-python-api
Atlassian Python REST API wrapper. The atlassian-python-api library provides a simple and convenient way to interact with Atlassian products (such as Jira Service management, Jira Software, Confluence, Bitbucket and apps Insight, X-Ray) using Python. It is based on the official REST APIs of these products and by community for Atlassian
Python★ 1,670↓ 13.8M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
25At Riskhealth index
foliojs/fontkit
An advanced font engine for Node and the browser
JavaScript★ 1,667↓ 44.5M/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
npm
50Moderatehealth index
FormidableLabs/react-fast-compare
fastest deep equal comparison for React
JavaScript★ 1,666↓ 98.5M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
MarkBaker/PHPComplex
PHP Class for handling Complex numbers
PHP★ 1,663↓ 9.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
getsentry/raven-python
Raven is the legacy Python client for Sentry (getsentry.com) — replaced by sentry-python
Python★ 1,662↓ 1.5M/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
RubyGems
42Weakhealth index
mdp/rotp
Ruby One Time Password library
Ruby★ 1,657Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
DenisCarriere/geocoder
:earth_asia: Python Geocoder
Python★ 1,655Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0