Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,151
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,947 recordsRanked by popularity · browse by tag · record statistics
npm
29At Riskhealth index
arcanis/clipanion
Type-safe CLI library / framework with no runtime dependencies
TypeScript★ 1,257↓ 18.3M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
npkgz/cli-progress
:hourglass: easy to use progress-bar for command-line/terminal applications
JavaScript★ 1,256↓ 40M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
redis/redis-om-node
Object mapping, and more, for Redis and Node.js. Written in TypeScript.
TypeScript★ 1,256↓ 126.1K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
VainF/pytorch-msssim
Fast and differentiable MS-SSIM and SSIM for pytorch.
Python★ 1,253Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
developit/dlv
Safe deep property access in 120 bytes. x = dlv(obj, 'a.b.x')
JavaScript★ 1,251↓ 153M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
google/textfsm
Python module for parsing semi-structured text into python tables.
Python★ 1,248↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
davidbonnet/astring
🌳 Tiny and fast JavaScript code generator from an ESTree-compliant AST.
JavaScript★ 1,247↓ 84.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
15Criticalhealth index
DmitryTsepelev/store_model
Work with JSON-backed attributes as ActiveRecord-ish models
Ruby★ 1,232Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Polymarket/py-clob-client
Python client for the Polymarket CLOB
Python★ 1,231↓ 459.3K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
22At Riskhealth index
JavaScript★ 1,229↓ 130M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI · Go
32At Riskhealth index
allwefantasy/auto-coder
No repository description published.
Python★ 1,222↓ 9,096/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
34At Riskhealth index
kudobuilder/kudo
Kubernetes Universal Declarative Operator (KUDO)
Go★ 1,214Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,212↓ 649.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
arundo/adtk
A Python toolkit for rule-based/unsupervised anomaly detection in time series
Python★ 1,211Sep 17, 2026
MPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,211↓ 169M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,198↓ 154M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,198Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
35Weakhealth index
TritonDataCenter/node-verror
Rich JavaScript errors
JavaScript · Makefile★ 1,189Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
SukkaW/nolyfill
Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
TypeScript · JavaScript★ 1,186Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
40Weakhealth index
pmndrs/its-fine
🐶🔥 A collection of escape hatches for React.
TypeScript★ 1,183↓ 25.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
marnusw/date-fns-tz
Complementary library for date-fns v2 adding IANA time zone support
JavaScript · TypeScript★ 1,180↓ 42.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
developit/web-worker
Consistent Web Workers in browser and Node.
JavaScript★ 1,174↓ 30.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
12Criticalhealth index
rocicorp/replicache
Realtime Sync for Any Backend Stack
Mixed★ 1,174Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go
25At Riskhealth index
Code-Hex/pget
The fastest, resumable file download client
Go★ 1,173Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
lukeed/sirv
An optimized middleware & CLI application for serving static files~!
JavaScript★ 1,173↓ 142M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
moxystudio/node-cross-spawn
A cross platform solution to node's spawn and spawnSync
JavaScript★ 1,171↓ 909M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0