Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,555
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,304 recordsRanked by popularity · browse by tag · record statistics
PyPI · npm
73Goodhealth index
RasaHQ/rasa
💬 Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, connect to Slack, Facebook, and more - Create chatbots and voice assistants
Python★ 21.3KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
25At Riskhealth index
rough-stuff/rough
Create graphics with a hand-drawn, sketchy, appearance
HTML · TypeScript★ 21.1KAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
apache/mxnet
Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more
C++ · Python★ 20.8KAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm · RubyGems
32At Riskhealth index
petkaantonov/bluebird
:bird: :zap: Bluebird is a full featured promise library with unmatched performance.
JavaScript★ 20.5K↓ 217M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven · npm
50Moderatehealth index
linlinjava/litemall
又一个小商城。litemall = Spring Boot后端 + Vue管理员前端 + 微信小程序用户前端 + Vue用户移动端
Java · JavaScript★ 20.3KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Maven
16Criticalhealth index
yudaocode/SpringBoot-Labs
一个涵盖六个专栏:Spring Boot 2.X、Spring Cloud、Spring Cloud Alibaba、Dubbo、分布式消息队列、分布式事务的仓库。希望胖友小手一抖,右上角来个 Star,感恩 1024
Java★ 20.1KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
Maven
65Goodhealth index
antlr/antlr4
ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
Java · C++ · C#★ 19KAug 5, 2026
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
dianping/cat
CAT 作为服务端项目基础组件,提供了 Java, C/C++, Node.js, Python, Go 等多语言客户端,已经在美团点评的基础架构中间件框架(MVC框架,RPC框架,数据库框架,缓存框架等,消息队列,配置系统等)深度集成,为美团点评各业务线提供系统丰富的性能指标、健康状况、实时告警等。
Java★ 18.9KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go
27At Riskhealth index
jmoiron/sqlx
general purpose extensions to golang's database/sql
Go★ 17.7KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
14Criticalhealth index
npm/npm
This repository is moving to: https://github.com/npm/cli
Mixed★ 17.6KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
15Criticalhealth index
dotnet/corefx
This repo is used for servicing PR's for .NET Core 2.1 and 3.1. Please visit us at https://github.com/dotnet/runtime
Mixed★ 17.5KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
justauth/JustAuth
🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!
Java★ 17.5KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
32At Riskhealth index
nfl/react-helmet
A document head manager for React
JavaScript★ 17.5K↓ 13.7M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Go
28At Riskhealth index
emirpasic/gods
GoDS (Go Data Structures) - Sets, Lists, Stacks, Maps, Trees, Queues, and much more
Go★ 17.5KAug 5, 2026
Custom licenseAug 5, 2026 · metrics 2.10.0
npm
19Criticalhealth index
janl/mustache.js
Minimal templating with {{mustaches}} in JavaScript
JavaScript★ 16.7K↓ 67.8M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
shuzheng/zheng
基于Spring+SpringMVC+Mybatis分布式敏捷开发系统架构,提供整套公共微服务服务模块:集中权限管理(单点登录)、内容管理、支付中心、用户管理(支持第三方登录)、微信平台、存储系统、配置中心、日志分析、任务和通知等,支持服务治理、监控和追踪,努力为中小型企业打造全方位J2EE企业级开发解决方案。
Java · CSS★ 16.7KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
JeffLi1993/springboot-learning-example
spring boot 实践学习案例,是 spring boot 初学者及核心技术巩固的最佳实践。
Java · HTML★ 16.6KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
16Criticalhealth index
brix/crypto-js
JavaScript library of crypto standards.
JavaScript★ 16.4K↓ 76.7M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
Maven
16Criticalhealth index
dyc87112/SpringBoot-Learning
《Spring Boot基础教程》,2.x版本持续连载中!点击下方链接直达教程目录!
Java · HTML★ 15.7KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
exceljs/exceljs
Excel Workbook Manager
JavaScript★ 15.4K↓ 49.6M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
albumentations-team/albumentations
Fast and flexible image augmentation library. Paper about the library: https://www.mdpi.com/2078-2489/11/2/125
Python★ 15.3KAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
erusev/parsedown
Better Markdown Parser in PHP
PHP · HTML★ 15.1K↓ 1.6M/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
16Criticalhealth index
kriskowal/q
A promise library for JavaScript
JavaScript★ 15K↓ 56M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
mamoe/mirai
高效率 QQ 机器人支持库
Kotlin★ 14.8KAug 15, 2026
AGPL-3.0Aug 15, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
aleju/imgaug
Image augmentation for machine learning experiments.
Python★ 14.7K↓ 1.3M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
bulletphysics/bullet3
Bullet Physics SDK: real-time collision detection and multi-physics simulation for VR, games, visual effects, robotics, machine learning etc.
C++ · C★ 14.7K↓ 583.3K/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
neutraltone/awesome-stock-resources
:city_sunrise: A collection of links for free stock photography, video and Illustration websites
Ruby★ 14.5KAug 27, 2026
CC0-1.0Aug 27, 2026 · metrics 2.10.0
Go
19Criticalhealth index
google/wire
Compile-time Dependency Injection for Go
Go★ 14.4KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
gollum/gollum
A simple, Git-powered wiki with a local frontend and support for many kinds of markup and content.
Ruby · JavaScript★ 14.3KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
spotify/annoy
Approximate Nearest Neighbors in C++/Python optimized for memory usage and loading/saving to disk
C++ · Python · Lua★ 14.3K↓ 1.3M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0