Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,748
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,434 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,199↓ 172M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,199Aug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
Go
46Weakhealth index
uber-go/multierr
Combine one or more Go errors together
Go★ 1,198Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
helloflask/bootstrap-flask
Bootstrap 4 & 5 helper for your Flask projects.
SCSS · Python · HTML★ 1,195Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
35Weakhealth index
TritonDataCenter/node-verror
Rich JavaScript errors
JavaScript · Makefile★ 1,191Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
56Moderatehealth index
email-spec/email-spec
Collection of RSpec/MiniTest matchers and Cucumber steps for testing email in a ruby app using ActionMailer or Pony
Ruby★ 1,191Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
64Moderatehealth index
ROCm/MIOpen
[DEPRECATED] Moved to ROCm/rocm-libraries repo
Assembly★ 1,190Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,188↓ 169M/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
SukkaW/nolyfill
Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
TypeScript · JavaScript★ 1,185Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
41Weakhealth index
pmndrs/its-fine
🐶🔥 A collection of escape hatches for React.
TypeScript★ 1,184↓ 26.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
marnusw/date-fns-tz
Complementary library for date-fns v2 adding IANA time zone support
JavaScript · TypeScript★ 1,180↓ 42.5M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
29At Riskhealth index
developit/web-worker
Consistent Web Workers in browser and Node.
JavaScript★ 1,175↓ 27.4M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Aug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
Maven
8Criticalhealth index
mgarin/weblaf
WebLaF is a fully open-source Look & Feel and component library written in pure Java for cross-platform desktop Swing applications.
Java★ 1,174Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
benjamn/ast-types
Esprima-compatible implementation of the Mozilla JS Parser API
TypeScript★ 1,172↓ 242M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
30At Riskhealth index
moxystudio/node-cross-spawn
A cross platform solution to node's spawn and spawnSync
JavaScript★ 1,171↓ 961M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
carmen-ruby/carmen
A repository of geographic regions for Ruby
Ruby★ 1,169Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
GaParmar/clean-fid
PyTorch - FID calculation with proper image resizing and quantization steps [CVPR 2022]
Python★ 1,168Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
geraintluff/tv4
Tiny Validator for JSON Schema v4
JavaScript★ 1,166Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
iver56/torch-audiomentations
Fast audio data augmentation in PyTorch. Inspired by audiomentations. Useful for deep learning.
Python★ 1,164Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
kbandla/dpkt
fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
Python★ 1,159Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
TypeScript · MDX★ 1,152↓ 59K/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
gemelo-ai/vocos
Vocos: Closing the gap between time-domain and Fourier-based neural vocoders for high-quality audio synthesis
Python★ 1,150Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
21At Riskhealth index
iancoleman/strcase
A golang package for converting to snake_case or CamelCase
Go★ 1,145Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jsocol/django-ratelimit
Cache-based rate-limiting for Django
Python★ 1,145Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
ncalc/ncalc
NCalc is a fast and lightweight expression evaluator library for .NET, designed for flexibility and high performance. It supports a wide range of mathematical and logical operations.
C#★ 1,142Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
nikic/iter
Iteration primitives using generators
PHP★ 1,141↓ 143.8K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
beda-software/drf-writable-nested
Writable nested model serializer for Django REST Framework
Python★ 1,139↓ 562.9K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
28At Riskhealth index
mattphillips/deep-object-diff
Deep diffs two objects, including nested structures of arrays and objects, and returns the difference. ❄️
JavaScript★ 1,139↓ 16.8M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI · npm
29At Riskhealth index
ivelum/djangoql
Advanced search language for Django
Python · HTML★ 1,138Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0