Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,878
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,512 recordsRanked by popularity · browse by tag · record statistics
crates.io
30At Riskhealth index
retep998/winapi-rs
Rust bindings to Windows API
Rust★ 1,930↓ 80.8M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
appium/WebDriverAgent
A WebDriver server for iOS, tvOS and watchOS
Objective-C★ 1,928Oct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
17Criticalhealth index
dominictarr/JSONStream
rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)
JavaScript★ 1,928↓ 47.7M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
omnilib/aiomultiprocess
Take a modern Python codebase to the next level of performance.
Python★ 1,924↓ 3.5M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
npm
40Weakhealth index
dchest/tweetnacl-js
Port of TweetNaCl cryptographic library to JavaScript
JavaScript★ 1,923↓ 136M/moSep 17, 2026
UnlicenseSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
Tiiiger/bert_score
BERT score for text generation
Jupyter Notebook · Python★ 1,919↓ 476.9K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
erikrose/parsimonious
The fastest pure-Python PEG parser I can muster
Python★ 1,919↓ 6.1M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
npm
32At Riskhealth index
vercel/async-retry
Retrying made simple, easy and async
JavaScript★ 1,918↓ 117M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
pmaupin/pdfrw
pdfrw is a pure Python library that reads and writes PDFs
Python · Jupyter Notebook★ 1,909Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
thampiman/reverse-geocoder
A fast, offline reverse geocoder in Python
Python · Jupyter Notebook · C++★ 1,908↓ 382.2K/moSep 17, 2026
LGPL-2.1Sep 17, 2026 · metrics 2.10.0
npm
40Weakhealth index
jonaskello/tsconfig-paths
Load node modules according to tsconfig paths, in run-time or via API.
TypeScript★ 1,906Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
Mimino666/langdetect
Port of Google's language-detection library to Python.
Python★ 1,905↓ 10M/moOct 24, 2026
Custom licenseOct 24, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
hamstergem/hamster
Efficient, Immutable, Thread-Safe Collection classes for Ruby
Ruby★ 1,901Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nytimes/react-tracking
🎯 Declarative tracking for React apps.
JavaScript★ 1,898↓ 565.9K/moSep 26, 2026
Custom licenseSep 26, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
microsoft/BlingFire
A lightning fast Finite State machine and REgular expression manipulation library.
C++★ 1,892↓ 908.1K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
46Weakhealth index
feross/buffer
The buffer module from node.js, for the browser.
JavaScript★ 1,891↓ 632M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
—
15Criticalhealth index
Tufte-LaTeX/tufte-latex
A Tufte-inspired LaTeX class for producing handouts, papers, and books
TeX★ 1,889Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
shouldjs/should.js
BDD style assertions for node.js -- test framework agnostic
JavaScript★ 1,888↓ 17.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
alpacahq/alpaca-trade-api-python
Python client for Alpaca's trade API
Python★ 1,886↓ 250.5K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
43Weakhealth index
tdegrunt/jsonschema
JSON Schema validation
JavaScript★ 1,875↓ 23.3M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
github/pages-gem
A simple Ruby Gem to bootstrap dependencies for setting up and maintaining a local Jekyll environment in sync with GitHub Pages
Ruby · Shell★ 1,873Oct 26, 2026
MITOct 26, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
timsainb/noisereduce
Noise reduction in python using spectral gating (speech, bioacoustics, audio, time-domain signals)
Jupyter Notebook★ 1,873↓ 288.8K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
mosuka/bayard
A full-text search and indexing server written in Rust.
Rust★ 1,869↓ 32/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
long2ice/fastapi-cache
fastapi-cache is a tool to cache fastapi response and function result, with backends support redis and memcached.
Python★ 1,867↓ 971.1K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
fent/randexp.js
Create random strings that match a given regular expression.
JavaScript★ 1,865↓ 41.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
alexreardon/tiny-invariant
A tiny invariant function
TypeScript · JavaScript★ 1,863↓ 318M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
descriptinc/descript-audio-codec
State-of-the-art audio codec with 90x compression factor. Supports 44.1kHz, 24kHz, and 16kHz mono/stereo audio.
Python★ 1,859↓ 675.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
14Criticalhealth index
bripkens/connect-history-api-fallback
Fallback to index.html for applications that are using the HTML 5 history API
JavaScript★ 1,855↓ 66.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
contiamo/restful-react
A consistent, declarative way of interacting with RESTful backends, featuring code-generation from Swagger and OpenAPI specs 🔥
TypeScript★ 1,853↓ 38.8K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
8Criticalhealth index
mrmn2/PdfDing
NOW MANAGED ON CODEBERG
Mixed★ 1,850Sep 26, 2026
No licenseSep 26, 2026 · metrics 2.10.0