Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,770
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,979 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
toplenboren/simple-git-hooks
A simple git hooks manager for small projects
JavaScript★ 1,682↓ 3.1M/moOct 2, 2026
MITOct 2, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
rustedpy/result
NOT MAINTAINED - A simple Rust like Result type for Python 3. Fully type annotated.
Python★ 1,681↓ 2.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
atlassian-api/atlassian-python-api
Atlassian Python REST API wrapper. The atlassian-python-api library provides a simple and convenient way to interact with Atlassian products (such as Jira Service management, Jira Software, Confluence, Bitbucket and apps Insight, X-Ray) using Python. It is based on the official REST APIs of these products and by community for Atlassian
Python★ 1,680↓ 7.9M/moOct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
MarkBaker/PHPComplex
PHP Class for handling Complex numbers
PHP★ 1,670↓ 13.1M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
npm
23At Riskhealth index
foliojs/fontkit
An advanced font engine for Node and the browser
JavaScript★ 1,670↓ 49M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
Hex
31At Riskhealth index
pow-auth/pow
Robust, modular, and extendable user authentication system
Elixir★ 1,667↓ 15K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
31At Riskhealth index
silevis/reactgrid
Add spreadsheet-like behavior to your React app
TypeScript★ 1,667↓ 329.5K/moOct 6, 2026
MITOct 6, 2026 · metrics 2.10.0
npm
19Criticalhealth index
JavaScript★ 1,666Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
FormidableLabs/react-fast-compare
fastest deep equal comparison for React
JavaScript★ 1,665↓ 97.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
taiga-family/maskito
Collection of libraries to create an input mask which ensures that user types value according to predefined format.
TypeScript★ 1,665↓ 4.6M/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
getsentry/raven-python
Raven is the legacy Python client for Sentry (getsentry.com) — replaced by sentry-python
Python★ 1,661↓ 1.5M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
jsverify/jsverify
Write powerful and concise tests. Property-based testing for JavaScript. Like QuickCheck.
JavaScript★ 1,659↓ 125.7K/moOct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
DenisCarriere/geocoder
:earth_asia: Python Geocoder
Python★ 1,657↓ 1.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
mortada/fredapi
Python API for FRED (Federal Reserve Economic Data) and ALFRED (Archival FRED)
Python★ 1,657↓ 1.1M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
LottieFiles/lottie-player
Lottie viewer/player as an easy to use web component! https://lottiefiles.com/web-player
TypeScript · JavaScript · HTML★ 1,656↓ 516.9K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
42Weakhealth index
mdp/rotp
Ruby One Time Password library
Ruby★ 1,656Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
rwightman/efficientdet-pytorch
A PyTorch impl of EfficientDet faithful to the original Google impl w/ ported weights
Python★ 1,656↓ 441.1K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
avkonst/hookstate
The simple but very powerful and incredibly fast state management for React that is based on hooks
TypeScript★ 1,652↓ 302.6K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
19Criticalhealth index
corona-warn-app/cwa-app-ios
Native iOS app using the exposure notification framework from Apple. The CWA development ends on May 31, 2023. You still can warn other users until April 30, 2023. More information:
Swift★ 1,651Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
breuleux/jurigged
Hot reloading for Python
Python★ 1,647↓ 494.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
lelylan/simple-oauth2
A simple Node.js client library for Oauth2
JavaScript★ 1,645↓ 3M/moAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pixelb/ps_mem
A utility to accurately report the in core memory usage for a program
Python★ 1,641↓ 1.4M/moSep 17, 2026
LGPL-2.1Sep 17, 2026 · metrics 2.10.0
PyPI
60Moderatehealth index
facebookincubator/submitit
Python 3.8+ toolbox for submitting jobs to Slurm
Python★ 1,640Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
java-json-tools/json-schema-validator
A JSON Schema validation implementation in pure Java, which aims for correctness and performance, in that order
Java★ 1,640Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
datamade/usaddress
:us: a python library for parsing unstructured United States address strings into address components
Python★ 1,637Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
Kodiqa-Solutions/VaultS3
Lightweight, S3-compatible object storage server with built-in web dashboard. Single binary, low memory, encryption at rest.
Go · TypeScript★ 1,635Oct 19, 2026
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/nanoevents
Simple and tiny (107 bytes) event emitter library for JavaScript
TypeScript · JavaScript★ 1,634↓ 5M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
35Weakhealth index
nophead/NopSCADlib
Library of parts modelled in OpenSCAD and a framework for making projects
OpenSCAD★ 1,633Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
sendgrid/sendgrid-python
The Official Twilio SendGrid Python API Library
Python★ 1,631↓ 19.5M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0