Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,382
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,393 recordsRanked by popularity · browse by tag · record statistics
npm
31At Riskhealth index
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
JavaScript★ 5,590↓ 134M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
29At Riskhealth index
kelseyhightower/envconfig
Golang library for managing configuration data from environment variables
Go★ 5,468Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
rails-api/active_model_serializers
ActiveModel::Serializer implementation and Rails hooks
Ruby★ 5,341Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
ipython-contrib/jupyter_contrib_nbextensions
A collection of various notebook extensions for Jupyter
JavaScript · HTML★ 5,276↓ 367.7K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
euske/pdfminer
Python PDF Parser (Not actively maintained). Check out pdfminer.six.
Python★ 5,273↓ 245K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
rails/webpacker
Use Webpack to manage app-like JavaScript modules in Rails
Ruby · JavaScript★ 5,272↓ 744K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
32At Riskhealth index
segmentio/ksuid
K-Sortable Globally Unique IDs
Go★ 5,271Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
nikic/FastRoute
Fast request router for PHP
PHP★ 5,269↓ 2.4M/moOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
testing-library/react-hooks-testing-library
🐏 Simple and complete React hooks testing utilities that encourage good testing practices.
TypeScript★ 5,257↓ 10.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
bgrins/TinyColor
Fast, small color manipulation and conversion for JavaScript
JavaScript★ 5,251↓ 49.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
pypa/sampleproject
A sample project that exists for PyPUG's "Tutorial on Packaging and Distributing Projects"
Python★ 5,240↓ 488K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
standard-things/esm
Tomorrow's ECMAScript modules today!
JavaScript★ 5,237↓ 27M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
bukosabino/ta
Technical Analysis Library using Pandas and Numpy
Jupyter Notebook · Python★ 5,222↓ 979K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rest-client/rest-client
Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.
Ruby★ 5,212Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
JoshClose/CsvHelper
Library to help reading and writing CSV files
C# · CSS★ 5,208Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
Marak/colors.js
get colors in your node.js console
JavaScript★ 5,159↓ 100M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rails-api/rails-api
Rails for API only applications
Ruby★ 5,129Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
vmg/redcarpet
The safe Markdown parser, reloaded.
C · HTML · Ruby★ 5,079Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
Lyken17/pytorch-OpCounter
Count the MACs / FLOPs of your PyTorch model.
Python★ 5,078↓ 887K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
hashicorp/terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
TypeScript★ 5,066↓ 2M/moSep 17, 2026
MPL-2.0Sep 17, 2026 · metrics 2.10.0
npm · Maven
29At Riskhealth index
itinance/react-native-fs
Native filesystem access for react-native
C++ · C# · Objective-C★ 5,043↓ 2.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
Netflix/fast_jsonapi
No Longer Maintained - A lightning fast JSON:API serializer for Ruby Objects.
Ruby★ 5,032Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · RubyGems
19Criticalhealth index
google/pytype
A static type analyzer for Python code
Python★ 5,030↓ 819.1K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
frangoteam/FUXA
Web-based Process Visualization (SCADA/HMI/Dashboard) software
TypeScript · JavaScript · HTML★ 5,027↓ 45/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist
42Weakhealth index
PHP-FFMpeg/PHP-FFMpeg
An object oriented PHP driver for FFMpeg binary
PHP★ 5,015↓ 1.1M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Instagram/MonkeyType
A Python library that generates static type annotations by collecting runtime types
Python★ 5,002↓ 404.9K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
googlemaps/google-maps-services-python
Python client library for Google Maps API Web Services
Python★ 4,980↓ 3.1M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
25At Riskhealth index
MediaBrowser/Emby
Emby Server is a personal media server with apps on just about every device.
C#★ 4,969Sep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI · npm
19Criticalhealth index
dpgaspar/Flask-AppBuilder
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
Python★ 4,960↓ 14.4M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
Kinnara/ModernWpf
Modern styles and controls for your WPF applications
C#★ 4,959Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0