Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,150
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,948 recordsRanked by popularity · browse by tag · record statistics
PyPI
21At Riskhealth index
GaParmar/clean-fid
PyTorch - FID calculation with proper image resizing and quantization steps [CVPR 2022]
Python★ 1,169Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
iver56/torch-audiomentations
Fast audio data augmentation in PyTorch. Inspired by audiomentations. Useful for deep learning.
Python★ 1,168Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
callstack/masked-view
React Native Masked View Library
JavaScript · Java · Objective-C★ 1,167Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
26At Riskhealth index
geraintluff/tv4
Tiny Validator for JSON Schema v4
JavaScript★ 1,165↓ 11M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
kbandla/dpkt
fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
Python★ 1,163Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
TypeScript · MDX★ 1,161↓ 51.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
solod-dev/solod
A subset of Go that translates to C
Go★ 1,161Sep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jsocol/django-ratelimit
Cache-based rate-limiting for Django
Python★ 1,148Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
nikic/iter
Iteration primitives using generators
PHP★ 1,141↓ 148.3K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI · npm
33At Riskhealth index
ivelum/djangoql
Advanced search language for Django
Python · HTML★ 1,139Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
mattphillips/deep-object-diff
Deep diffs two objects, including nested structures of arrays and objects, and returns the difference. ❄️
JavaScript★ 1,139↓ 16.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
diyan/pywinrm
Python library for Windows Remote Management (WinRM)
Python★ 1,135↓ 6.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
35Weakhealth index
peterolson/BigInteger.js
An arbitrary length integer library for Javascript
JavaScript★ 1,126↓ 138M/moSep 17, 2026
UnlicenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytries/marisa-trie
Static memory-efficient Trie-like structures for Python based on marisa-trie C++ library.
Cython · Python★ 1,124↓ 2.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
prettymuchbryce/http-status-codes
Constants enumerating the HTTP status codes. All status codes defined in RFC1945 (HTTP/1.0, RFC2616 (HTTP/1.1), and RFC2518 (WebDAV) are supported.
TypeScript★ 1,120↓ 31.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
aave/aave-v3-core
This repository contains the core smart contracts of the Aave V3 protocol.
TypeScript · Solidity★ 1,115↓ 11.6K/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
37Weakhealth index
edsrzf/mmap-go
A portable mmap package for Go
Go★ 1,113Sep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
patrickhulce/third-party-web
Data on third party entities and their impact on the web.
JavaScript★ 1,110↓ 20.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
fengsp/color-thief-py
Grabs the dominant color or a representative color palette from an image. Uses Python and Pillow.
Python★ 1,109↓ 508.2K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go · PyPI
32At Riskhealth index
iov-one/weave
Easy-to-use SDK to build Tendermint ABCI applications
Go★ 1,105Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
29At Riskhealth index
d3/d3-geo
Geographic projections, spherical shapes and spherical trigonometry.
JavaScript★ 1,103↓ 117M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
istanbuljs/istanbuljs
monorepo containing the various nuts and bolts that facilitate istanbul.js test instrumentation
JavaScript★ 1,103↓ 1.5B/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
BurntSushi/byteorder
Rust library for reading/writing numbers in big-endian and little-endian.
Rust★ 1,096↓ 50.8M/moSep 16, 2026
UnlicenseSep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Grokzen/redis-py-cluster
Python cluster client for the official redis cluster. Redis 3.0+.
Python · Ruby★ 1,094↓ 2.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
man-c/pycoingecko
Python wrapper for the CoinGecko API
Python★ 1,092Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dtolnay/paste
Macros for all your token pasting needs
Rust★ 1,090↓ 32.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
shashwatak/satellite-js
Modular set of functions for SGP4 and SDP4 propagation of TLE and OMM.
TypeScript · C++★ 1,089↓ 453.1K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
16Criticalhealth index
request/request-promise-native
The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.
JavaScript★ 1,087↓ 11.2M/moSep 15, 2026
ISCSep 15, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
csurfer/rake-nltk
Python implementation of the Rapid Automatic Keyword Extraction algorithm using NLTK.
Python★ 1,084↓ 273.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0